version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
service compress-config
!
hostname HQ_SW1
!
boot-start-marker
boot-end-marker
!
!
no logging console
!
no aaa new-model
no process cpu extended history
no process cpu autoprofile hog
!
!
!
!
!
vtp mode transparent
!
!
!
no ip domain-lookup
no ip cef
no ipv6 cef
!
!
!
spanning-tree mode pvst
spanning-tree portfast edge bpduguard default
spanning-tree extend system-id
!
!
vlan 100
 name Controllers
no cdp run
!
! 
!
!
!
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/0
 description Link to Internet Firewall
 no switchport
 ip address 204.186.19.10 255.255.255.0
 negotiation auto
!
interface GigabitEthernet0/1
 description Link to OnPrem_R1
 switchport access vlan 100
 negotiation auto
 spanning-tree portfast edge
!
interface GigabitEthernet0/2
 description Link to OnPrem_R2
 switchport access vlan 100
 negotiation auto
 spanning-tree portfast edge
!
interface GigabitEthernet0/3
 negotiation auto
!
interface GigabitEthernet1/0
 negotiation auto
 no cdp tlv app
!
interface GigabitEthernet1/1
 negotiation auto
 no cdp tlv app
!
interface GigabitEthernet1/2
 negotiation auto
 no cdp tlv app
!
interface GigabitEthernet1/3
 negotiation auto
 no cdp tlv app
!
interface GigabitEthernet2/0
 negotiation auto
 no cdp tlv app
!
interface GigabitEthernet2/1
 negotiation auto
 no cdp tlv app
!
interface GigabitEthernet2/2
 negotiation auto
 no cdp tlv app
!
interface GigabitEthernet2/3
 negotiation auto
!
interface GigabitEthernet3/0
 description Link to Manager1
 switchport access vlan 100
 switchport mode access
 negotiation auto
 no cdp tlv app
 spanning-tree portfast edge
!
interface GigabitEthernet3/1
 description Link to Validator1
 switchport access vlan 100
 switchport mode access
 negotiation auto
 no cdp tlv app
 spanning-tree portfast edge
!
interface GigabitEthernet3/2
 description Link to Controller1
 switchport access vlan 100
 switchport mode access
 negotiation auto
 no cdp tlv app
 spanning-tree portfast edge
!
interface GigabitEthernet3/3
 negotiation auto
 no cdp tlv app
!
interface Vlan100
 ip address 10.100.10.1 255.255.255.0
!
ip forward-protocol nd
!
ip http server
ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 204.186.19.1
ip ssh server algorithm encryption aes128-ctr aes192-ctr aes256-ctr
ip ssh client algorithm encryption aes128-ctr aes192-ctr aes256-ctr
!
!
!
no service-routing capabilities-manager
!
!
!
tftp-server flash0:/CA.crt
!
control-plane
!
!
line con 0
 exec-timeout 0 0
line aux 0
line vty 0 4
 exec-timeout 0 0
 login
!
!
end