! Desabilita log no console
no logging console

! Desabilita o PAD (PSTN Access Device) e habilita timestamps
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption

! Definindo o hostname
hostname SW4000-10.3

! Marcadores de boot
boot-start-marker
boot-end-marker

! Configuração de senhas e usuários
enable secret 9 $9$2SgI9kqvsjgzmO$pgK2mPCiJBJnkxVyUmgyuWOhg9ig1IElhRNYsenF0jI
username alianca privilege 15 secret 9 $9$A6xMYi/b6qaP8O$278EH1py5uI/Z7xHUIXc1Ydox6eZD5wgYjPph/CejLU
username Administrator privilege 15 secret 9 $9$DeMtRAQ8HS.Aku$8TpEDs5esrTBCMIpDg9urIa2y8YkqPaGwVo.rdugMrI

! Ativando AAA para autenticação
aaa new-model
aaa authentication login AAA_RADIUS group radius local
aaa authorization exec default group radius local if-authenticated
aaa session-id common

! Configurações de horário e MTU
clock timezone GTM -3 0
system mtu routing 1500

! Desativando pesquisa de domínio para evitar atraso ao digitar comandos
no ip domain-lookup
ip domain-name ALIANCA

! Configuração de PTP (Precision Time Protocol) para o modo transparente
ptp mode e2etransparent 

! Configuração de certificados autoassinado
crypto pki trustpoint TP-self-signed-563510784
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-563510784
 revocation-check none
 rsakeypair TP-self-signed-563510784

crypto pki certificate chain TP-self-signed-563510784
 certificate self-signed 01 nvram:IOS-Self-Sig#1.cer

! Configuração de Spanning Tree
spanning-tree mode rapid-pvst
spanning-tree extend system-id

! Configuração de VLANs e interfaces
vlan internal allocation policy ascending

! Configurações de interfaces
interface GigabitEthernet1/1
 description CONECTA AO SW4000-10.4
 switchport trunk allowed vlan 4,5,10,100,200
 switchport trunk native vlan 100
 switchport mode trunk

interface GigabitEthernet1/2
 description CONECTA AO SW4000-17.3
 switchport trunk allowed vlan 4,5,10,100,200
 switchport trunk native vlan 100
 switchport mode trunk

interface FastEthernet1/9
 description :: CONECTA AO ACCESS-POINT OUTDOOR ::
 switchport trunk allowed vlan 4,5,10,100,200
 switchport trunk native vlan 100
 switchport mode trunk

interface FastEthernet1/16
 description :: MGMT - PORTA DE GERENCIA ::
 switchport access vlan 100
 switchport mode access
 spanning-tree portfast edge

! Configuração de VLANs de gerenciamento
interface Vlan100
 ip address 172.27.38.91 255.255.255.0

! Roteamento e gateway
ip default-gateway 172.27.38.1
ip route 0.0.0.0 0.0.0.0 172.27.38.1

! Configuração do HTTP/HTTPS
ip http server
ip http authentication local
ip http secure-server

! Configuração do SSH
ip ssh version 2
ip radius source-interface Vlan100

! Configuração de NTP
ntp server 192.168.129.16 source Vlan100

! Configuração de SNMP
snmp-server community Acn41la##2k15 RO

! Configuração de RADIUS
radius server ALISRVAD01
 address ipv4 192.168.128.24 auth-port 1645 acct-port 1646
 timeout 5
 key