=== Troubleshooting session started === Command show running-config takes few minutes to execute. ! !Version ArubaOS-CX !export-password: default hostname ROE-SCH-ASW0X domain-name rdoghm.local user admin group administrators clock timezone europe/amsterdam ntp server 172.26.2.1 iburst ntp server 172.26.2.2 iburst ntp enable ! ! ! radius-server key ! radius-server host az-hecht-cppm01.rdoghm.nl key radius-server host az-hecht-cppm02.rdoghm.nl key aaa authentication allow-fail-through ! ! aaa group server radius CPPM server az-hecht-cppm01.rdoghm.nl server az-hecht-cppm02.rdoghm.nl ! aaa authentication login default group CPPM local aaa accounting all-mgmt default start-stop group CPPM local ! radius dyn-authorization enable ! radius dyn-authorization client az-hecht-cppm01.rdoghm.nl radius dyn-authorization client az-hecht-cppm02.rdoghm.nl aruba-central location-override device-eucentral3-d2.central.arubanetworks.com vrf default ssh server vrf default ssh server vrf mgmt crypto pki ta-profile SECTIGO-AAA-CA vsf member 1 type jl725a client track ip vlan 1 vlan 10 name MGMT client track ip dhcpv4-snooping vlan 20 name PRINTER client track ip dhcpv4-snooping vlan 30 name ACCESS-POINT client track ip dhcpv4-snooping vlan 40 name DATA-CLIENT client track ip dhcpv4-snooping vlan 50 name VOIP client track ip dhcpv4-snooping vlan 60 name BETAAL client track ip dhcpv4-snooping vlan 70 name BEWAKING client track ip dhcpv4-snooping vlan 80 name TOEGANG client track ip dhcpv4-snooping vlan 90 name GAST client track ip dhcpv4-snooping vlan 100 name IOT client track ip dhcpv4-snooping vlan 300 name LEGACY client track ip dhcpv4-snooping vlan 401 name INTERNET-1 vlan 402 name INTERNET-2 vlan 999 name QUARANTINE spanning-tree spanning-tree priority 1 spanning-tree config-name ROE-SCH spanning-tree config-revision 1 interface mgmt no shutdown ip dhcp port-access role PRE-AUTH auth-mode client-mode session-timeout 3600 trust-mode none stp-admin-edge-port reauth-period 300 vlan access 999 aaa authentication port-access dot1x authenticator radius server-group CPPM enable aaa authentication port-access mac-auth radius server-group CPPM enable interface lag 1 no shutdown description UPLINK vlan trunk native 300 vlan trunk allowed all dhcpv4-snooping trust client track ip disable interface lag 2 no shutdown description UPLINK vlan trunk native 300 vlan trunk allowed all dhcpv4-snooping trust client track ip disable interface 1/1/1 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/2 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/3 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/4 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/5 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/6 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/7 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/8 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/9 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/10 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/11 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/12 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/13 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/14 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/15 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/16 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/17 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/18 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/19 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/20 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/21 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/22 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/23 no shutdown vlan access 999 aaa authentication port-access auth-precedence mac-auth dot1x aaa authentication port-access client-limit 10 aaa authentication port-access critical-role PRE-AUTH aaa authentication port-access dot1x authenticator reauth enable aaa authentication port-access mac-auth reauth enable client track ip enable client track ip update-interval 300 interface 1/1/24 no shutdown speed 100-full description UPLINK vlan trunk native 300 vlan trunk allowed all dhcpv4-snooping trust client track ip disable interface 1/1/25 shutdown description DISABLED vlan access 999 interface 1/1/26 shutdown description DISABLED vlan access 999 interface 1/1/27 shutdown description DISABLED vlan access 999 interface 1/1/28 shutdown description DISABLED vlan access 999 interface vlan 1 ip dhcp interface vlan 10 shutdown description MGMT ip address 10.7.X.221/24 ip helper-address 172.26.X.100 ip helper-address 172.26.X.101 ip helper-address 172.28.X.6 ip helper-address 172.28.X.15 interface vlan 300 description LEGACY ip address 192.168.X.221/24 ip helper-address 172.26.X.100 ip helper-address 172.26.X.101 ip helper-address 172.28.X.6 ip helper-address 172.28.X.15 ip route 0.0.0.0/0 192.168.X.254 ip dns server-address 8.8.8.8 ip dns server-address 172.26.X.1 ip dns server-address 172.26.X.2 ip dns host az-hecht-cppm01.rdoghm.nl 172.28.X.6 ip dns host az-hecht-cppm02.rdoghm.nl 172.28.X.15 ! ! ! ! ! https-server vrf default https-server vrf mgmt === Troubleshooting session completed ===