## Last changed: 2012-02-04 13:06:47 CST
version 10.4R5.5;
system {
    host-name vmwnetswitch3;
    domain-name magid.int;
    time-zone America/Chicago;
    root-authentication {
        encrypted-password "$1$fyThFzEk$cHRGjhtLw5gUaGF0CxvuB1";
    }
    name-server {
        10.0.4.21;
        10.0.4.60;
        10.0.4.61;
    }
    login {
        user madmin {
            full-name madmin;
            uid 200;
            class super-user;
            authentication {
                encrypted-password "$1$9vU.XXTc$pW9IglXsE3OSdPfB2j5YE.";
            }
        }
    }
    services {
        telnet;
        web-management {
            http;
        }
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
    ntp {
        server 10.0.4.21;
        server 10.0.4.60;
        server 10.0.4.61;
    }
}
chassis {
    aggregated-devices {
        ethernet {
            device-count 1;
        }
    }
    alarm {
        management-ethernet {
            link-down ignore;
        }
    }
}
interfaces {
    interface-range AccessGroup {
        member-range ge-0/0/0 to ge-0/0/43;
        unit 0 {
            family ethernet-switching {
                filter {
                    input mf-cos-classifier;
                }
            }
        }
    }
    ge-0/0/0 {
        description "mgsVC1 N1";
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/1 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/2 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/3 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/4 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/5 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/6 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/7 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/8 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/9 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/10 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/11 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/12 {
        description "mgsVW3 N1 vMotion";
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members vMotion;
                }
            }
        }
    }
    ge-0/0/13 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/14 {
        description "mgsVW3 N3 Trunk";
        unit 0 {
            family ethernet-switching {
                port-mode trunk;
                vlan {
                    members [ PC DMZ VoIP Wireless WAN-NAT WAN ];
                }
                native-vlan-id default;
            }
        }
    }
    ge-0/0/15 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/16 {
        description "mgsVW3 N5 Console";
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/17 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/18 {
        description "mgsVW3 N7 Guest1";
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/19 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/20 {
        description "mgsVW2 N1 vMotion";
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members vMotion;
                }
            }
        }
    }
    ge-0/0/21 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/22 {
        description "mgsVW2 N3 Trunk";
        unit 0 {
            family ethernet-switching {
                port-mode trunk;
                vlan {
                    members [ PC DMZ VoIP Wireless WAN-NAT WAN ];
                }
                native-vlan-id default;
            }
        }
    }
    ge-0/0/23 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/24 {
        description "mgsVW2 N5 Console";
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/25 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/26 {
        description "mgsVW2 N7 Guest1";
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/27 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/28 {
        description "mgsVW1 N1 vMotion";
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members vMotion;
                }
            }
        }
    }
    ge-0/0/29 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/30 {
        description "mgsVW1 N3 Trunk";
        unit 0 {
            family ethernet-switching {
                port-mode trunk;
                vlan {
                    members [ PC VoIP DMZ Wireless WAN-NAT WAN ];
                }
                native-vlan-id default;
            }
        }
    }
    ge-0/0/31 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/32 {
        description "mgsVW1 N5 Console";
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/33 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/34 {
        description "mgsVW1 N7 Guest1";
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/35 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/36 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/37 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/38 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/39 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/40 {
        description "QNAP N1";
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/41 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/42 {
        description "mgsNAS N1";
        unit 0 {
            family ethernet-switching {
                port-mode access;
                vlan {
                    members Servers;
                }
            }
        }
    }
    ge-0/0/43 {
        unit 0 {
            family ethernet-switching {
                port-mode access;
            }
        }
    }
    ge-0/0/44 {
        ether-options {
            802.3ad ae0;
        }
    }
    ge-0/0/45 {
        ether-options {
            802.3ad ae0;
        }
    }
    ge-0/0/46 {
        ether-options {
            802.3ad ae0;
        }
    }
    ge-0/0/47 {
        description "TOP TRUNK N47";
        unit 0 {
            family ethernet-switching {
                port-mode trunk;
                vlan {
                    members [ Servers default VoIP Wireless DMZ PC WAN-NAT WAN ];
                }
                native-vlan-id default;
            }
        }
    }
    ge-0/1/0 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/1/1 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/1/2 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/1/3 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ae0 {
        description UPLINK-LACP;
        aggregated-ether-options {
            minimum-links 1;
            link-speed 1g;
            lacp {
                active;
                periodic fast;
            }
        }
        unit 0 {
            family ethernet-switching {
                port-mode trunk;
                vlan {
                    members all;
                }
                native-vlan-id default;
            }
        }
    }
    vlan {
        unit 0 {
            family inet {
                address 10.0.0.63/22;
            }
        }
    }
}
snmp {
    description "VMWARE SWITCH 1";
    location "WIDE RACK BOTTOM";
    contact MIS;
    community magidRO {
        authorization read-only;
    }
    trap-group TrapsGroup1 {
        categories {
            chassis;
            link;
            routing;
            startup;
            rmon-alarm;
            configuration;
        }
        targets {
            10.0.4.251;
        }
    }
}
routing-options {
    static {
        route 0.0.0.0/0 next-hop 10.0.0.1;
    }
}
protocols {
    vstp {
        vlan all;
    }
}
class-of-service {
    classifiers {
        dscp dscp_ba {
            forwarding-class control {
                loss-priority low code-points [ nc1 nc2 ];
            }
            forwarding-class voice {
                loss-priority low code-points ef;
            }
            forwarding-class apps {
                loss-priority low code-points af21;
            }
            forwarding-class servers {
                loss-priority low code-points af11;
            }
            forwarding-class best-effort {
                loss-priority low code-points be;
            }
        }
        dscp juniper_dscp_classifier {
            import default;
            forwarding-class voice {
                loss-priority low code-points 101110;
            }
        }
        ieee-802.1 juniper_ieee_classifier {
            import default;
            forwarding-class voice {
                loss-priority low code-points 101;
            }
        }
    }
    drop-profiles {
        80-full {
            fill-level 80;
        }
    }
    forwarding-classes {
        class control queue-num 7;
        class voice queue-num 7;
        class apps queue-num 3;
        class servers queue-num 1;
        class best-effort queue-num 0;
        class expedited-forwarding queue-num 5;
        class assured-forwarding queue-num 1;
    }
    interfaces {
        ge-0/0/0 {
            scheduler-map access-port-sched;
        }
    }
    rewrite-rules {
        dscp rewrite-dscp {
            forwarding-class control {
                loss-priority low code-point nc1;
                loss-priority high code-point nc2;
            }
            forwarding-class voice {
                loss-priority low code-point ef;
            }
            forwarding-class apps {
                loss-priority low code-point af21;
            }
            forwarding-class servers {
                loss-priority low code-point af11;
            }
            forwarding-class best-effort {
                loss-priority low code-point be;
            }
        }
    }
    scheduler-maps {
        network-port-sched {
            forwarding-class control scheduler control-network-sched;
            forwarding-class voice scheduler voice-network-sched;
            forwarding-class apps scheduler business-sched;
            forwarding-class servers scheduler server-sched;
            forwarding-class best-effort scheduler be-sched;
        }
        access-port-sched {
            forwarding-class control scheduler control-user-sched;
            forwarding-class voice scheduler voice-user-sched;
            forwarding-class apps scheduler business-sched;
            forwarding-class servers scheduler server-sched;
            forwarding-class best-effort scheduler be-sched;
        }
        juniper-port-profile-map {
            forwarding-class voice scheduler strict-priority-scheduler;
            forwarding-class expedited-forwarding scheduler expedited-scheduler;
            forwarding-class assured-forwarding scheduler assured-scheduler;
            forwarding-class best-effort scheduler best-effort-scheduler;
        }
    }
    schedulers {
        control-network-sched {
            shaping-rate percent 5;
            buffer-size percent 5;
            priority strict-high;
            drop-profile-map loss-priority high protocol any drop-profile 80-full;
        }
        control-user-sched {
            shaping-rate percent 1;
            buffer-size percent 5;
            priority strict-high;
            drop-profile-map loss-priority high protocol any drop-profile 80-full;
        }
        voice-network-sched {
            shaping-rate percent 5;
            buffer-size percent 5 exact;
            priority strict-high;
        }
        voice-user-sched {
            shaping-rate percent 1;
            buffer-size percent 5 exact;
            priority strict-high;
        }
        business-sched {
            transmit-rate percent 60;
            buffer-size percent 60;
            priority low;
        }
        server-sched {
            transmit-rate percent 30;
            buffer-size percent 30;
            priority low;
        }
        be-sched {
            transmit-rate remainder;
            buffer-size remainder;
            priority low;
        }
        strict-priority-scheduler {
            buffer-size percent 5;
            priority strict-high;
        }
        expedited-scheduler {
            transmit-rate percent 30;
            buffer-size percent 30;
            priority low;
        }
        assured-scheduler {
            transmit-rate percent 25;
            buffer-size percent 25;
            priority low;
        }
        best-effort-scheduler {
            transmit-rate percent 35;
            buffer-size percent 40;
            priority low;
        }
    }
}
firewall {
    family ethernet-switching {
        filter voicefilter {
            term allvoice {
                then {
                    forwarding-class voice;
                    loss-priority low;
                }
            }
        }
        filter mf-cos-classifier {
            term voice-mf {
                from {
                    source-address {
                        10.3.4.0/22;
                        10.0.4.13/32;
                    }
                }
                then {
                    forwarding-class voice;
                    loss-priority low;
                }
            }
            term business-app-mf {
                from {
                    destination-address {
                        10.0.4.27/32;
                    }
                }
                then {
                    forwarding-class apps;
                    loss-priority low;
                }
            }
            term server-bulk-mf {
                from {
                    destination-address {
                        10.0.4.0/22;
                    }
                }
                then {
                    forwarding-class servers;
                    loss-priority low;
                }
            }
            term default {
                then {
                    forwarding-class best-effort;
                    loss-priority low;
                }
            }
        }
    }
}
ethernet-switching-options {
    storm-control {
        interface all;
    }
}
vlans {
    DMZ {
        description DMZ;
        vlan-id 60;
    }
    PC {
        description PC;
        vlan-id 40;
    }
    Servers {
        description Servers;
        vlan-id 20;
    }
    VoIP {
        description VoIP;
        vlan-id 512;
    }
    WAN {
        description WAN;
        vlan-id 70;
    }
    WAN-NAT {
        description WAN-NAT;
        vlan-id 80;
    }
    Wireless {
        description Wireless;
        vlan-id 30;
    }
    default {
        vlan-id 1;
        interface {
            ge-0/0/43.0;
        }
        l3-interface vlan.0;
    }
    vMotion {
        description vMotion;
        vlan-id 25;
    }
}