Building configuration...

Current configuration : 1577 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R1-Edge
!
!
!
enable secret 5 $1$mERr$q70rzGWFvn3ubJe9cZ91a1
!
!
!
!
!
!
ip cef
no ipv6 cef
!
!
!
username admin secret 5 $1$mERr$qvQ4xEW18PRaHS0uXVe8v.
!
!
license udi pid CISCO2911/K9 sn FTX15242ECN-
!
!
!
!
!
!
!
!
!
!
!
ip ssh version 2
no ip domain-lookup
ip domain-name enterprise.local
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface GigabitEthernet0/0
 no ip address
 duplex auto
 speed auto
!
interface GigabitEthernet0/0.10
 encapsulation dot1Q 10
 ip address 192.168.10.1 255.255.255.0
 ip access-group USER_FILTER in
!
interface GigabitEthernet0/0.99
 encapsulation dot1Q 99
 ip address 192.168.99.1 255.255.255.0
!
interface GigabitEthernet0/1
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface GigabitEthernet0/2
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface Vlan1
 no ip address
 shutdown
!
ip classless
!
ip flow-export version 9
!
!
ip access-list extended USER_FILTER
 remark Deny User Subnet from Accessing Management Plane
 deny ip 192.168.10.0 0.0.0.255 192.168.99.0 0.0.0.255
 remark Permit All Other User Data Traffic
 permit ip 192.168.10.0 0.0.0.255 any
access-list 99 remark Permit Only Admin-PC
access-list 99 permit host 192.168.99.10
access-list 99 deny any
!
banner motd ^C Authorized Access Only - R1-Edge Management Gateway ^C
!
!
!
!
line con 0
 exec-timeout 15 0
 logging synchronous
!
line aux 0
!
line vty 0 4
 access-class 99 in
 login local
 transport input ssh
!
!
!
end