SW3#show run
Building configuration...

Current configuration : 4119 bytes
!
! Last configuration change at 16:36:30 UTC Sat Jan 31 2026
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
service compress-config
!
hostname SW3
!
boot-start-marker
boot-end-marker
!
!
!
aaa new-model
!
!
aaa group server radius ISE-GROUP
 server name ISE
!         
aaa authentication dot1x default group ISE-GROUP
aaa authorization network default group ISE-GROUP 
aaa accounting dot1x default start-stop group ISE-GROUP
!
!
!
!
!
!
aaa session-id common
!
!
!
!
!
!
ip dhcp excluded-address 192.168.60.1 192.168.60.199
ip dhcp excluded-address 192.168.60.211 192.168.60.254
!
ip dhcp pool VLAN60_POOL
 network 192.168.60.0 255.255.255.0
 default-router 192.168.60.110 
 dns-server 192.168.60.110 
!
!
ip cef
no ipv6 cef
!
!
dot1x system-auth-control
!
spanning-tree mode pvst
spanning-tree extend system-id
!
!
! 
!
!
!
!
!
!
!
!
!
!         
!
!
interface GigabitEthernet0/0
 description "Link to Mgmt Bridge"
 switchport access vlan 200
 negotiation auto
!
interface GigabitEthernet0/1
 description "Link to MAB authenticated trusted host"
 switchport access vlan 60
 switchport mode access
 negotiation auto
 authentication event fail action next-method
 authentication open
 authentication order mab
 authentication priority mab
 authentication port-control auto
 mab
 dot1x pae authenticator
 spanning-tree portfast edge
!
interface GigabitEthernet0/2
 description "Link to Firewall FTD interface"
 switchport access vlan 60
 negotiation auto
!
interface GigabitEthernet0/3
 description "Unauthenticated link to untrusted host"
 switchport access vlan 60
 switchport mode access
 negotiation auto
!
interface Vlan60
 ip address 192.168.60.106 255.255.255.0
!
interface Vlan200
 ip address 192.168.200.106 255.255.255.0
!
ip default-gateway 192.168.200.10
ip forward-protocol nd
!
ip http server
ip http secure-server
!
ip ssh server algorithm encryption aes128-ctr aes192-ctr aes256-ctr
ip ssh client algorithm encryption aes128-ctr aes192-ctr aes256-ctr
!
ip access-list extended PREAUTH_BOOTSTRAP
 permit udp any eq bootpc any eq bootps
 permit udp any eq bootps any eq bootpc
 permit udp any any eq domain
!
ip radius source-interface Vlan200 
!
!
!
!
!
radius server ISE
 address ipv4 192.168.200.100 auth-port 1812 acct-port 1813
 key cisco123
!
!
control-plane
!
banner exec ^C
IOSv - Cisco Systems Confidential -

          
Supplemental End User License Restrictions

This IOSv software is provided AS-IS without warranty of any kind. Under no circumstances may this software be used separate from the Cisco Modeling Labs Software that this software was provided with, or deployed or used as part of a production environment.

By using the software, you agree to abide by the terms and conditions of the Cisco End User License Agreement at http://www.cisco.com/go/eula. Unauthorized use or distribution of this software is expressly prohibited.
^C
banner incoming ^C
IOSv - Cisco Systems Confidential -

Supplemental End User License Restrictions

This IOSv software is provided AS-IS without warranty of any kind. Under no circumstances may this software be used separate from the Cisco Modeling Labs Software that this software was provided with, or deployed or used as part of a production environment.

By using the software, you agree to abide by the terms and conditions of the Cisco End User License Agreement at http://www.cisco.com/go/eula. Unauthorized use or distribution of this software is expressly prohibited.
^C        
banner login ^C
IOSv - Cisco Systems Confidential -

Supplemental End User License Restrictions

This IOSv software is provided AS-IS without warranty of any kind. Under no circumstances may this software be used separate from the Cisco Modeling Labs Software that this software was provided with, or deployed or used as part of a production environment.

By using the software, you agree to abide by the terms and conditions of the Cisco End User License Agreement at http://www.cisco.com/go/eula. Unauthorized use or distribution of this software is expressly prohibited.
^C
!
line con 0
line aux 0
line vty 0 4
!
!
end

SW3#