I am reviewing the stored config. It's very nicely done for an access switch.
proper ACLs on SNMP server / management SSH
dhcp snooping and RA guard
arp inspection with src and dst mac
err-disable recovery for all common problems
bpduguard, 802.1x
I'm pretty jealous, this config is nice!