API tools faq
paste
peektoseen

DGS-3627G_2

peektoseen
Mar 7th, 2012
81
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 44.24 KB | None | 0 0
raw download clone embed print report
  1.  
  2.  
  3. #-------------------------------------------------------------------------------
  4.  
  5. # DGS-3627G Gigabit Ethernet Switch
  6.  
  7. # Configuration
  8.  
  9. #
  10.  
  11. # Firmware: Build 2.55.B08
  12.  
  13. # Copyright(C) 2010 D-Link Corporation. All rights reserved.
  14.  
  15. #-------------------------------------------------------------------------------
  16.  
  17.  
  18.  
  19.  
  20. # STACK
  21.  
  22.  
  23. config stacking force_master_role state disable
  24.  
  25.  
  26. # DOUBLE_VLAN
  27.  
  28. disable double_vlan
  29.  
  30.  
  31. # BASIC
  32.  
  33.  
  34. # ACCOUNT LIST
  35.  
  36. # ACCOUNT END
  37.  
  38. # PASSWORD ENCRYPTION
  39.  
  40. disable password encryption
  41.  
  42. config serial_port auto_logout 10_minutes
  43.  
  44. enable telnet 23
  45.  
  46. enable web 80
  47.  
  48. enable clipaging
  49.  
  50.  
  51. # STORM
  52.  
  53.  
  54. config traffic control auto_recover_time 0
  55.  
  56. config traffic trap none
  57.  
  58. config traffic control 1-27 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5
  59.  
  60.  
  61. # LOOP_DETECT
  62.  
  63. config loopdetect ports 18 state enabled
  64.  
  65.  
  66. # GM
  67.  
  68.  
  69. config sim candidate
  70.  
  71. disable sim
  72.  
  73. config sim dp_interval 30
  74.  
  75. config sim hold_time 100
  76.  
  77.  
  78. # GM_H
  79.  
  80.  
  81.  
  82. # SYSLOG
  83.  
  84.  
  85. enable syslog
  86.  
  87. config system_severity log information
  88.  
  89. config system_severity trap information
  90.  
  91. create syslog host 1 severity all facility local0 udp_port 514 ipaddress 192.168.12.170 state enable
  92.  
  93. config log_save_timing on_demand
  94.  
  95.  
  96. # QOS
  97.  
  98.  
  99. enable hol_prevention
  100.  
  101. config 802.1p default_priority 1-27 0
  102.  
  103. config bandwidth_control 1-27 rx_rate no_limit tx_rate no_limit
  104.  
  105. config per_queue bandwidth_control ports 1-27 0 min_rate no_limit max_rate no_limit
  106.  
  107. config per_queue bandwidth_control ports 1-27 1 min_rate no_limit max_rate no_limit
  108.  
  109. config per_queue bandwidth_control ports 1-27 2 min_rate no_limit max_rate no_limit
  110.  
  111. config per_queue bandwidth_control ports 1-27 3 min_rate no_limit max_rate no_limit
  112.  
  113. config per_queue bandwidth_control ports 1-27 4 min_rate no_limit max_rate no_limit
  114.  
  115. config per_queue bandwidth_control ports 1-27 5 min_rate no_limit max_rate no_limit
  116.  
  117. config per_queue bandwidth_control ports 1-27 6 min_rate no_limit max_rate no_limit
  118.  
  119. config scheduling_mechanism ports 1-27 strict
  120.  
  121. config scheduling ports 1-27 0 max_packet 1
  122.  
  123. config scheduling ports 1-27 1 max_packet 2
  124.  
  125. config scheduling ports 1-27 2 max_packet 3
  126.  
  127. config scheduling ports 1-27 3 max_packet 4
  128.  
  129. config scheduling ports 1-27 4 max_packet 5
  130.  
  131. config scheduling ports 1-27 5 max_packet 6
  132.  
  133. config scheduling ports 1-27 6 max_packet 7
  134.  
  135. config 802.1p user_priority ports 1-27 0 2
  136.  
  137. config 802.1p user_priority ports 1-27 1 0
  138.  
  139. config 802.1p user_priority ports 1-27 2 1
  140.  
  141. config 802.1p user_priority ports 1-27 3 3
  142.  
  143. config 802.1p user_priority ports 1-27 4 4
  144.  
  145. config 802.1p user_priority ports 1-27 5 5
  146.  
  147. config 802.1p user_priority ports 1-27 6 6
  148.  
  149. config 802.1p user_priority ports 1-27 7 6
  150.  
  151.  
  152. # MIRROR
  153.  
  154.  
  155. disable mirror
  156.  
  157.  
  158. # TRAF-SEGMENTATION
  159.  
  160. config traffic_segmentation 1-27 forward_list all
  161.  
  162.  
  163. # SSL
  164.  
  165.  
  166. disable ssl
  167.  
  168. enable ssl ciphersuite RSA_with_RC4_128_MD5
  169.  
  170. enable ssl ciphersuite RSA_with_3DES_EDE_CBC_SHA
  171.  
  172. enable ssl ciphersuite DHE_DSS_with_3DES_EDE_CBC_SHA
  173.  
  174. enable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5
  175.  
  176. config ssl cachetimeout 600
  177.  
  178.  
  179. # PORT
  180.  
  181.  
  182. disable jumbo_frame
  183.  
  184. config ports 1 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description 4-18 (138)
  185.  
  186. config ports 2 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description 4-1 (16)
  187.  
  188. config ports 3 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description 4-2 (16)
  189.  
  190. config ports 4 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description 4-3 (16)
  191.  
  192. config ports 5 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description 4-4 (16)
  193.  
  194. config ports 6 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description 4-5 (125)
  195.  
  196. config ports 7 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description 4-6 (16)
  197.  
  198. config ports 8,14-20 speed auto capability_advertised 1000_full flow_control disable learning enable state enable
  199.  
  200. config ports 9 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description (12)
  201.  
  202. config ports 10 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description 4-11
  203.  
  204. config ports 11 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description 4-12
  205.  
  206. config ports 12 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description 4-16
  207.  
  208. config ports 13 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description 4-17
  209.  
  210. config ports 21 medium_type copper speed auto capability_advertised 10_half 10_full 100_half 100_full 1000_full flow_control disable learning enable state enable description kopacb
  211.  
  212. config ports 21-24 medium_type fiber speed auto capability_advertised 1000_full flow_control disable learning enable state enable
  213.  
  214. config ports 22-24 medium_type copper speed auto capability_advertised 10_half 10_full 100_half 100_full 1000_full flow_control disable learning enable state enable
  215.  
  216. config ports 25 speed auto flow_control disable learning enable state enable description trunk
  217.  
  218. config ports 26-27 speed auto flow_control disable learning enable state enable
  219.  
  220.  
  221. # OAM
  222.  
  223.  
  224.  
  225. # DDM
  226.  
  227.  
  228. config ddm trap disable
  229.  
  230. config ddm log enable
  231.  
  232. config ddm ports 1-24 state enable shutdown alarm
  233.  
  234.  
  235. # PORT_LOCK
  236.  
  237.  
  238. config port_security ports 1-27 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnReset
  239.  
  240.  
  241. # SNMPv3
  242.  
  243.  
  244. delete snmp community public
  245.  
  246. delete snmp community private
  247.  
  248. delete snmp user initial
  249.  
  250. delete snmp group initial
  251.  
  252. delete snmp group ReadGroup
  253.  
  254. delete snmp group WriteGroup
  255.  
  256. delete snmp view restricted all
  257.  
  258. delete snmp view CommunityView all
  259.  
  260. config snmp engineID 800000ab03002191c08600
  261.  
  262. create snmp view restricted 1.3.6.1.2.1.1 view_type included
  263.  
  264. create snmp view restricted 1.3.6.1.2.1.11 view_type included
  265.  
  266. create snmp view restricted 1.3.6.1.6.3.10.2.1 view_type included
  267.  
  268. create snmp view restricted 1.3.6.1.6.3.11.2.1 view_type included
  269.  
  270. create snmp view restricted 1.3.6.1.6.3.15.1.1 view_type included
  271.  
  272. create snmp view CommunityView 1 view_type included
  273.  
  274. create snmp view CommunityView 1.3.6.1.6.3 view_type excluded
  275.  
  276. create snmp view CommunityView 1.3.6.1.6.3.1 view_type included
  277.  
  278. create snmp group public v1 read_view CommunityView notify_view CommunityView
  279.  
  280. create snmp group public v2c read_view CommunityView notify_view CommunityView
  281.  
  282. create snmp group initial v3 noauth_nopriv read_view restricted notify_view restricted
  283.  
  284. create snmp group private v1 read_view CommunityView write_view CommunityView notify_view CommunityView
  285.  
  286. create snmp group private v2c read_view CommunityView write_view CommunityView notify_view CommunityView
  287.  
  288. create snmp group ReadGroup v1 read_view CommunityView notify_view CommunityView
  289.  
  290. create snmp group ReadGroup v2c read_view CommunityView notify_view CommunityView
  291.  
  292. create snmp group WriteGroup v1 read_view CommunityView write_view CommunityView notify_view CommunityView
  293.  
  294. create snmp group WriteGroup v2c read_view CommunityView write_view CommunityView notify_view CommunityView
  295.  
  296. create snmp community private view CommunityView read_write
  297.  
  298. create snmp community public view CommunityView read_only
  299.  
  300. create snmp user initial initial
  301.  
  302.  
  303. # MANAGEMENT
  304.  
  305.  
  306. create trusted_host network 192.168.12.183/255.255.255.255
  307.  
  308. create trusted_host network 192.168.12.170/255.255.255.255
  309.  
  310. create trusted_host network 192.168.37.50/255.255.255.255
  311.  
  312. create trusted_host network 192.168.12.184/255.255.255.255
  313.  
  314. enable snmp traps
  315.  
  316. enable snmp authenticate_traps
  317. disable snmp
  318.  
  319. enable snmp linkchange_traps
  320.  
  321. disable rmon
  322.  
  323. config snmp linkchange_traps ports 1-27 enable
  324.  
  325.  
  326. # VLAN
  327.  
  328.  
  329. enable pvid auto_assign
  330.  
  331. config vlan default delete 1-27
  332.  
  333. config vlan default advertisement enable
  334.  
  335. create vlan VLAN4 tag 4
  336.  
  337. config vlan VLAN4 add tagged 21,25 advertisement disable
  338.  
  339. create vlan VLAN6 tag 6
  340.  
  341. config vlan VLAN6 add tagged 21,25 advertisement disable
  342.  
  343. create vlan VLAN7 tag 7
  344.  
  345. config vlan VLAN7 add tagged 21,25-26 advertisement disable
  346.  
  347. create vlan VLAN8 tag 8
  348.  
  349. config vlan VLAN8 add tagged 21,25-26 advertisement disable
  350.  
  351. create vlan VLAN9 tag 9
  352.  
  353. config vlan VLAN9 add tagged 21,25-26 advertisement disable
  354.  
  355. create vlan VLAN10 tag 10
  356.  
  357. config vlan VLAN10 add tagged 12,21,25-26 advertisement disable
  358.  
  359. create vlan VLAN11 tag 11
  360.  
  361. config vlan VLAN11 add tagged 21,25-27 advertisement disable
  362.  
  363. create vlan VLAN12 tag 12
  364.  
  365. config vlan VLAN12 add tagged 25
  366.  
  367. config vlan VLAN12 add untagged 7,9,21 advertisement disable
  368.  
  369. create vlan VLAN14 tag 14
  370.  
  371. config vlan VLAN14 add tagged 21,25-27 advertisement disable
  372.  
  373. create vlan VLAN15 tag 15
  374.  
  375. config vlan VLAN15 add tagged 21,25-26 advertisement disable
  376.  
  377. create vlan VLAN16 tag 16
  378.  
  379. config vlan VLAN16 add tagged 4,21,25
  380.  
  381. config vlan VLAN16 add untagged 2-3,5,8 advertisement disable
  382.  
  383. create vlan VLAN17 tag 17
  384.  
  385. config vlan VLAN17 add tagged 21,25
  386.  
  387. config vlan VLAN17 add untagged 14-17 advertisement disable
  388.  
  389. create vlan VLAN18 tag 18
  390.  
  391. config vlan VLAN18 add tagged 21,25
  392.  
  393. config vlan VLAN18 add untagged 10-13 advertisement disable
  394.  
  395. create vlan VLAN26 tag 26
  396.  
  397. config vlan VLAN26 add tagged 21,25 advertisement disable
  398.  
  399. create vlan VLAN27 tag 27
  400.  
  401. config vlan VLAN27 add tagged 21,25 advertisement disable
  402.  
  403. create vlan VLAN28 tag 28
  404.  
  405. config vlan VLAN28 add tagged 9,21,25 advertisement disable
  406.  
  407. create vlan VLAN29 tag 29
  408.  
  409. config vlan VLAN29 add tagged 21,25 advertisement disable
  410.  
  411. create vlan VLAN30 tag 30
  412.  
  413. config vlan VLAN30 add tagged 21,25 advertisement disable
  414.  
  415. create vlan VLAN31 tag 31
  416.  
  417. config vlan VLAN31 add tagged 21,25 advertisement disable
  418.  
  419. create vlan VLAN32 tag 32
  420.  
  421. config vlan VLAN32 add tagged 21,25 advertisement disable
  422.  
  423. create vlan VLAN33 tag 33
  424.  
  425. config vlan VLAN33 add tagged 21,25 advertisement disable
  426.  
  427. create vlan VLAN34 tag 34
  428.  
  429. config vlan VLAN34 add tagged 21,25 advertisement disable
  430.  
  431. create vlan VLAN35 tag 35
  432.  
  433. config vlan VLAN35 add tagged 21,25 advertisement disable
  434.  
  435. create vlan VLAN36 tag 36
  436.  
  437. config vlan VLAN36 add tagged 21,25 advertisement disable
  438.  
  439. create vlan VLAN37 tag 37
  440.  
  441. config vlan VLAN37 add tagged 21,25 advertisement disable
  442.  
  443. create vlan VLAN39 tag 39
  444.  
  445. config vlan VLAN39 add tagged 21,25 advertisement disable
  446.  
  447. create vlan VLAN40 tag 40
  448.  
  449. config vlan VLAN40 add tagged 21,25 advertisement disable
  450.  
  451. create vlan VLAN58 tag 58
  452.  
  453. config vlan VLAN58 add tagged 21,25 advertisement disable
  454.  
  455. create vlan VLAN61 tag 61
  456.  
  457. config vlan VLAN61 add tagged 21,25 advertisement disable
  458.  
  459. create vlan VLAN77 tag 77
  460.  
  461. config vlan VLAN77 add tagged 25
  462.  
  463. config vlan VLAN77 add untagged 19 advertisement disable
  464.  
  465. create vlan VLAN84 tag 84
  466.  
  467. config vlan VLAN84 add tagged 25-27 advertisement disable
  468.  
  469. create vlan VLAN90 tag 90
  470.  
  471. config vlan VLAN90 add tagged 21,25-26 advertisement disable
  472.  
  473. create vlan VLAN91 tag 91
  474.  
  475. config vlan VLAN91 add tagged 21,25-26 advertisement disable
  476.  
  477. create vlan VLAN97 tag 97
  478.  
  479. config vlan VLAN97 add tagged 21,25-26
  480.  
  481. config vlan VLAN97 add untagged 20 advertisement disable
  482.  
  483. create vlan VLAN98 tag 98
  484.  
  485. config vlan VLAN98 add tagged 25-26 advertisement disable
  486.  
  487. create vlan VLAN99 tag 99
  488.  
  489. config vlan VLAN99 add tagged 21,25 advertisement disable
  490.  
  491. create vlan VLAN100 tag 100
  492.  
  493. config vlan VLAN100 add tagged 21,25 advertisement disable
  494.  
  495. create vlan VLAN101 tag 101
  496.  
  497. config vlan VLAN101 add tagged 1-27 advertisement disable
  498.  
  499. create vlan VLAN108 tag 108
  500.  
  501. config vlan VLAN108 add tagged 21,25 advertisement disable
  502.  
  503. create vlan VLAN115 tag 115
  504.  
  505. config vlan VLAN115 add tagged 21,25-26 advertisement disable
  506.  
  507. create vlan VLAN117 tag 117
  508.  
  509. config vlan VLAN117 add tagged 25
  510.  
  511. config vlan VLAN117 add untagged 23 advertisement disable
  512.  
  513. create vlan VLAN124 tag 124
  514.  
  515. config vlan VLAN124 add tagged 21,25
  516.  
  517. config vlan VLAN124 add untagged 4 advertisement disable
  518.  
  519. create vlan VLAN125 tag 125
  520.  
  521. config vlan VLAN125 add tagged 21,25
  522.  
  523. config vlan VLAN125 add untagged 6 advertisement disable
  524.  
  525. create vlan VLAN130 tag 130
  526.  
  527. config vlan VLAN130 add tagged 21,25
  528.  
  529. config vlan VLAN130 add untagged 18 advertisement disable
  530.  
  531. create vlan VLAN138 tag 138
  532.  
  533. config vlan VLAN138 add tagged 21,25
  534.  
  535. config vlan VLAN138 add untagged 1 advertisement disable
  536.  
  537. create vlan VLAN140 tag 140
  538.  
  539. config vlan VLAN140 add tagged 21,25-26 advertisement disable
  540.  
  541. create vlan TV tag 745
  542.  
  543. config vlan TV add tagged 25
  544.  
  545. config vlan TV add untagged 22 advertisement disable
  546.  
  547. create vlan TIME tag 765
  548.  
  549. config vlan TIME add tagged 21,25 advertisement disable
  550.  
  551. create vlan managment tag 777
  552.  
  553. config vlan managment add tagged 1-21,23-27 advertisement disable
  554.  
  555. create vlan megafon tag 778
  556.  
  557. config vlan megafon add tagged 21,25 advertisement disable
  558.  
  559. create vlan inet tag 888
  560.  
  561. config vlan inet add tagged 21,23,25 advertisement disable
  562.  
  563. create vlan wifi tag 1000
  564.  
  565. config vlan wifi add tagged 18,21,25-26 advertisement disable
  566.  
  567. create vlan wifi_ tag 1001
  568.  
  569. config vlan wifi_ add tagged 21,24-26 advertisement disable
  570.  
  571. disable qinq
  572.  
  573. enable gvrp
  574.  
  575. disable vlan_trunk
  576.  
  577. config gvrp 1 state disable ingress_checking enable acceptable_frame admit_all pvid 138
  578.  
  579. config gvrp 2-3,5,8 state disable ingress_checking enable acceptable_frame admit_all pvid 16
  580.  
  581. config gvrp 4 state disable ingress_checking enable acceptable_frame admit_all pvid 124
  582.  
  583. config gvrp 6 state disable ingress_checking enable acceptable_frame admit_all pvid 125
  584.  
  585. config gvrp 7,9 state disable ingress_checking enable acceptable_frame admit_all pvid 12
  586.  
  587. config gvrp 10-13 state disable ingress_checking enable acceptable_frame admit_all pvid 18
  588.  
  589. config gvrp 14-17 state disable ingress_checking enable acceptable_frame admit_all pvid 17
  590.  
  591. config gvrp 18 state disable ingress_checking enable acceptable_frame admit_all pvid 130
  592.  
  593. config gvrp 19 state disable ingress_checking enable acceptable_frame admit_all pvid 77
  594.  
  595. config gvrp 20 state disable ingress_checking enable acceptable_frame admit_all pvid 97
  596.  
  597. config gvrp 21 state enable ingress_checking enable acceptable_frame admit_all pvid 12
  598.  
  599. config gvrp 22 state disable ingress_checking enable acceptable_frame admit_all pvid 745
  600.  
  601. config gvrp 23 state disable ingress_checking enable acceptable_frame admit_all pvid 117
  602.  
  603. config gvrp 24,26-27 state disable ingress_checking enable acceptable_frame admit_all pvid 1
  604.  
  605. config gvrp 25 state enable ingress_checking enable acceptable_frame admit_all pvid 1
  606.  
  607.  
  608. # PROTOCOL_VLAN
  609.  
  610.  
  611.  
  612. # QINQ
  613.  
  614.  
  615.  
  616. # SUBNETVLAN
  617.  
  618.  
  619. config vlan_precedence port 1-27 mac_based_vlan
  620.  
  621.  
  622. # SUPERVLAN
  623.  
  624.  
  625.  
  626. # RSPAN
  627.  
  628.  
  629. disable rspan
  630.  
  631.  
  632. # MEF
  633.  
  634.  
  635.  
  636. # 8021X
  637.  
  638.  
  639. disable 802.1x
  640.  
  641. config 802.1x auth_mode port_based
  642.  
  643. config 802.1x auth_protocol radius_eap
  644.  
  645. config 802.1x fwd_pdu system disable
  646.  
  647. config 802.1x max_users 4000
  648. config 802.1x authorization network radius enable
  649.  
  650. config 802.1x capability ports 1-27 none
  651.  
  652. config 802.1x auth_parameter ports 1-27 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
  653.  
  654. config 802.1x auth_parameter ports 1-27 max_users 16
  655.  
  656.  
  657. # guestvlan
  658.  
  659.  
  660.  
  661. # TR
  662.  
  663.  
  664.  
  665. # ACL
  666.  
  667.  
  668. create access_profile profile_id 4 ip destination_ip_mask 224.0.0.0
  669.  
  670. config access_profile profile_id 4 add access_id 1 ip destination_ip 224.0.0.0 port 1-27 permit priority 5 replace_dscp 48 rx_rate no_limit
  671.  
  672. disable cpu_interface_filtering
  673.  
  674.  
  675. # NLB
  676.  
  677.  
  678.  
  679. # LIMITED_MULTICAST_RANGE
  680.  
  681.  
  682.  
  683. # MULTICAST_VLAN
  684.  
  685.  
  686.  
  687. # FDB
  688.  
  689.  
  690. config fdb aging_time 300
  691.  
  692.  
  693. # ADDRBIND
  694.  
  695.  
  696. config address_binding ip_mac ports 1-27 forward_dhcppkt enable
  697.  
  698. disable address_binding dhcp_snoop
  699.  
  700. disable address_binding dhcp_snoop ipv6
  701.  
  702. disable address_binding nd_snoop
  703.  
  704. disable address_binding trap_log
  705.  
  706. config address_binding dhcp_snoop max_entry ports 1-27 limit no_limit
  707.  
  708.  
  709. # DHCPV6_SNOOPING
  710.  
  711.  
  712.  
  713. # ND_SNOOPING
  714.  
  715.  
  716.  
  717. # DhcpServerScreening
  718.  
  719.  
  720. config filter dhcp_server port all state disable
  721.  
  722. config filter dhcp_server illegal_server_log_suppress_duration 5min
  723.  
  724. config filter dhcp_server trap_log disable
  725.  
  726.  
  727. # ARPSpoofingPrevention
  728.  
  729.  
  730.  
  731. # MAC_ADDRESS_TABLE_NOTIFICATION
  732.  
  733.  
  734. disable mac_notification
  735.  
  736. config mac_notification interval 1 historysize 1
  737.  
  738. config mac_notification ports 1-27 disable
  739.  
  740.  
  741. # STP
  742.  
  743.  
  744. config stp version rstp
  745.  
  746. config stp maxage 20 maxhops 20 forwarddelay 15 txholdcount 6 fbpdu disable hellotime 2 lbd enable lbd_recover_timer 60 nni_bpdu_addr dot1ad
  747.  
  748. config stp priority 32768 instance_id 0
  749.  
  750. config stp mst_config_id name 00:21:91:C0:86:00 revision_level 0
  751.  
  752. disable stp
  753.  
  754. config stp ports 1-27 externalCost auto edge false p2p auto state enable restricted_role false restricted_tcn false lbd disable
  755.  
  756. config stp mst_ports 1-27 instance_id 0 internalCost auto priority 128
  757.  
  758. config stp ports 1-27 fbpdu disable
  759.  
  760.  
  761. # BPDU_TUNNEL
  762.  
  763.  
  764. config bpdu_tunnel ports all type none
  765. disable bpdu_tunnel
  766.  
  767.  
  768. # BPDU_PROTECTION
  769.  
  770. config bpdu_protection ports 1-27 mode drop
  771.  
  772.  
  773. # SAFEGUARD_ENGINE
  774.  
  775.  
  776. config safeguard_engine state enable utilization rising 90 falling 80 trap_log enable mode fuzzy
  777.  
  778.  
  779. # BANNER_PROMP
  780.  
  781.  
  782. config command_prompt default
  783.  
  784. config greeting_message default
  785.  
  786.  
  787. # SSH
  788.  
  789.  
  790. config ssh algorithm 3DES enable
  791.  
  792. config ssh algorithm AES128 enable
  793.  
  794. config ssh algorithm AES192 enable
  795.  
  796. config ssh algorithm AES256 enable
  797.  
  798. config ssh algorithm arcfour enable
  799.  
  800. config ssh algorithm blowfish enable
  801.  
  802. config ssh algorithm cast128 enable
  803.  
  804. config ssh algorithm twofish128 enable
  805.  
  806. config ssh algorithm twofish192 enable
  807.  
  808. config ssh algorithm twofish256 enable
  809.  
  810. config ssh algorithm MD5 enable
  811.  
  812. config ssh algorithm SHA1 enable
  813.  
  814. config ssh algorithm RSA enable
  815.  
  816. config ssh algorithm DSA enable
  817.  
  818. config ssh authmode password enable
  819.  
  820. config ssh authmode publickey enable
  821.  
  822. config ssh authmode hostbased enable
  823.  
  824. config ssh server maxsession 8
  825.  
  826. config ssh server contimeout 120
  827.  
  828. config ssh server authfail 2
  829.  
  830. config ssh server rekey never
  831.  
  832. config ssh server port 22
  833.  
  834. config ssh user SmartAV authmode password
  835.  
  836. disable ssh
  837.  
  838.  
  839. # SERVER_PROFILE
  840.  
  841.  
  842.  
  843. # DNSRESOLVER
  844.  
  845.  
  846. disable dns_resolver
  847.  
  848. config name_server timeout 3
  849.  
  850.  
  851. # CMDLOG
  852.  
  853.  
  854. disable command logging
  855.  
  856.  
  857. # BCPING
  858.  
  859.  
  860. enable broadcast_ping_reply
  861.  
  862.  
  863. # SNTP
  864.  
  865.  
  866. enable sntp
  867.  
  868. config time_zone operator + hour 4 min 0
  869.  
  870. config sntp primary 192.168.12.170 secondary 0.0.0.0 poll-interval 720
  871.  
  872. config dst disable
  873.  
  874.  
  875. # LACP
  876.  
  877.  
  878. config link_aggregation algorithm ip_source
  879.  
  880. config lacp_port 1-27 mode passive
  881.  
  882.  
  883. # IP
  884.  
  885.  
  886. config ipif_mac_mapping ipif System mac_offset 0
  887.  
  888. config ipif System ipaddress 172.16.0.1/16 vlan managment
  889.  
  890. config ipif System dhcpv6_client disable
  891.  
  892. config ipif System ip_directed_broadcast disable
  893.  
  894. config ipif System proxy_arp disable local disable
  895.  
  896. config ipif System ip_mtu 1500
  897.  
  898. config ipif System dhcpv6_client disable
  899.  
  900. config ipif System ip_directed_broadcast disable
  901.  
  902. disable autoconfig
  903.  
  904.  
  905. # ip_tunnel
  906.  
  907.  
  908.  
  909. # ERPS
  910.  
  911. disable erps
  912. config erps log disable
  913. config erps trap disable
  914.  
  915.  
  916. # DHCP_SERVER
  917.  
  918. config dhcp ping_packets 2
  919. config dhcp ping_timeout 500
  920. disable dhcp_server
  921.  
  922.  
  923. # WAC
  924.  
  925.  
  926. config wac switch_http_port 80
  927.  
  928. config wac method local
  929. config wac authorization network local enable
  930. config wac authorization network radius enable
  931.  
  932. disable wac
  933.  
  934. config wac ports 1-27 aging_time 1440 idle_time infinite block_time 60
  935.  
  936.  
  937. # JWAC
  938.  
  939.  
  940. config jwac switch_http_port 80
  941.  
  942. config jwac clear_quarantine_server_url
  943.  
  944. config jwac radius_protocol pap
  945.  
  946. disable jwac quarantine_server_monitor
  947.  
  948. config jwac quarantine_server_error_timeout 30
  949.  
  950. enable jwac forcible_logout
  951.  
  952. enable jwac udp_filtering
  953.  
  954. enable jwac redirect
  955.  
  956. config jwac redirect destination quarantine_server delay_time 1
  957.  
  958. disable jwac
  959.  
  960. config jwac authenticate_page english
  961.  
  962. config jwac authorization network radius enable
  963.  
  964. config jwac authorization network local enable
  965.  
  966. config jwac ports 1-27 auth_mode host_based max_authenticating_host 50 aging_time 1440 idle_time infinite block_time 60
  967.  
  968.  
  969. # SFLOW
  970.  
  971.  
  972.  
  973. # LLDP
  974.  
  975.  
  976. disable lldp
  977.  
  978. config lldp message_tx_interval 30
  979.  
  980. config lldp tx_delay 2
  981.  
  982. config lldp message_tx_hold_multiplier 4
  983.  
  984. config lldp reinit_delay 2
  985.  
  986. config lldp notification_interval 5
  987.  
  988. config lldp ports 1-27 notification disable
  989.  
  990. config lldp ports 1-27 admin_status tx_and_rx
  991.  
  992.  
  993. # MBA
  994.  
  995. disable mac_based_access_control
  996. config mac_based_access_control authorization network radius enable local enable
  997. config mac_based_access_control ports 1-27 state disable
  998. config mac_based_access_control ports 1-27 mode host_based
  999. config mac_based_access_control method local
  1000. config mac_based_access_control password default
  1001. config mac_based_access_control max_users 128
  1002.  
  1003.  
  1004. # MCFILTER
  1005.  
  1006.  
  1007. config multicast filtering_mode default filter_unregistered_groups
  1008.  
  1009. config multicast filtering_mode VLAN6 filter_unregistered_groups
  1010.  
  1011. config multicast filtering_mode VLAN7 filter_unregistered_groups
  1012.  
  1013. config multicast filtering_mode VLAN8 filter_unregistered_groups
  1014.  
  1015. config multicast filtering_mode VLAN9 filter_unregistered_groups
  1016.  
  1017. config multicast filtering_mode VLAN10 filter_unregistered_groups
  1018.  
  1019. config multicast filtering_mode VLAN11 filter_unregistered_groups
  1020.  
  1021. config multicast filtering_mode VLAN12 filter_unregistered_groups
  1022.  
  1023. config multicast filtering_mode VLAN14 filter_unregistered_groups
  1024.  
  1025. config multicast filtering_mode VLAN15 filter_unregistered_groups
  1026.  
  1027. config multicast filtering_mode VLAN16 filter_unregistered_groups
  1028.  
  1029. config multicast filtering_mode VLAN17 filter_unregistered_groups
  1030.  
  1031. config multicast filtering_mode VLAN18 filter_unregistered_groups
  1032.  
  1033. config multicast filtering_mode VLAN26 filter_unregistered_groups
  1034.  
  1035. config multicast filtering_mode VLAN27 filter_unregistered_groups
  1036.  
  1037. config multicast filtering_mode VLAN28 filter_unregistered_groups
  1038.  
  1039. config multicast filtering_mode VLAN31 filter_unregistered_groups
  1040.  
  1041. config multicast filtering_mode VLAN32 filter_unregistered_groups
  1042.  
  1043. config multicast filtering_mode VLAN33 filter_unregistered_groups
  1044.  
  1045. config multicast filtering_mode VLAN34 filter_unregistered_groups
  1046.  
  1047. config multicast filtering_mode VLAN35 filter_unregistered_groups
  1048.  
  1049. config multicast filtering_mode VLAN37 filter_unregistered_groups
  1050.  
  1051. config multicast filtering_mode VLAN40 filter_unregistered_groups
  1052.  
  1053. config multicast filtering_mode VLAN58 filter_unregistered_groups
  1054.  
  1055. config multicast filtering_mode VLAN61 filter_unregistered_groups
  1056.  
  1057. config multicast filtering_mode VLAN77 filter_unregistered_groups
  1058.  
  1059. config multicast filtering_mode VLAN84 filter_unregistered_groups
  1060.  
  1061. config multicast filtering_mode VLAN90 filter_unregistered_groups
  1062.  
  1063. config multicast filtering_mode VLAN91 filter_unregistered_groups
  1064.  
  1065. config multicast filtering_mode VLAN97 filter_unregistered_groups
  1066.  
  1067. config multicast filtering_mode VLAN98 filter_unregistered_groups
  1068.  
  1069. config multicast filtering_mode VLAN99 filter_unregistered_groups
  1070.  
  1071. config multicast filtering_mode VLAN100 filter_unregistered_groups
  1072.  
  1073. config multicast filtering_mode VLAN108 filter_unregistered_groups
  1074.  
  1075. config multicast filtering_mode VLAN115 filter_unregistered_groups
  1076.  
  1077. config multicast filtering_mode VLAN124 filter_unregistered_groups
  1078.  
  1079. config multicast filtering_mode VLAN125 filter_unregistered_groups
  1080.  
  1081. config multicast filtering_mode VLAN130 filter_unregistered_groups
  1082.  
  1083. config multicast filtering_mode VLAN138 filter_unregistered_groups
  1084.  
  1085. config multicast filtering_mode VLAN140 filter_unregistered_groups
  1086.  
  1087. config multicast filtering_mode TV filter_unregistered_groups
  1088.  
  1089. config multicast filtering_mode TIME filter_unregistered_groups
  1090.  
  1091. config multicast filtering_mode managment filter_unregistered_groups
  1092.  
  1093. config multicast filtering_mode megafon filter_unregistered_groups
  1094.  
  1095. config multicast filtering_mode inet filter_unregistered_groups
  1096.  
  1097. config multicast filtering_mode wifi filter_unregistered_groups
  1098.  
  1099. config multicast filtering_mode wifi_ filter_unregistered_groups
  1100.  
  1101.  
  1102. # COMPOUND_AUTHENTICATION
  1103.  
  1104. config authentication ports 1-27 auth_mode host_based
  1105. config authentication ports 1-27 multi_authen_methods none
  1106. enable authorization network
  1107. config authentication server failover block
  1108.  
  1109.  
  1110. # SNOOP
  1111.  
  1112.  
  1113. enable igmp_snooping
  1114.  
  1115. config igmp_snooping vlan default report_suppression disable
  1116.  
  1117. config igmp_snooping vlan default state disable fast_leave disable
  1118.  
  1119. config igmp_snooping querier vlan default query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1120.  
  1121. config igmp_snooping vlan VLAN4 report_suppression disable
  1122.  
  1123. config igmp_snooping vlan VLAN4 state disable fast_leave disable
  1124.  
  1125. config igmp_snooping querier vlan VLAN4 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1126.  
  1127. config igmp_snooping vlan VLAN6 report_suppression disable
  1128.  
  1129. config igmp_snooping vlan VLAN6 state disable fast_leave disable
  1130.  
  1131. config igmp_snooping querier vlan VLAN6 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1132.  
  1133. config igmp_snooping vlan VLAN7 report_suppression disable
  1134.  
  1135. config igmp_snooping vlan VLAN7 state disable fast_leave disable
  1136.  
  1137. config igmp_snooping querier vlan VLAN7 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1138.  
  1139. config igmp_snooping vlan VLAN8 report_suppression disable
  1140.  
  1141. config igmp_snooping vlan VLAN8 state disable fast_leave disable
  1142.  
  1143. config igmp_snooping querier vlan VLAN8 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1144.  
  1145. config igmp_snooping vlan VLAN9 report_suppression disable
  1146.  
  1147. config igmp_snooping vlan VLAN9 state disable fast_leave disable
  1148.  
  1149. config igmp_snooping querier vlan VLAN9 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1150.  
  1151. config igmp_snooping vlan VLAN10 report_suppression disable
  1152.  
  1153. config igmp_snooping vlan VLAN10 state disable fast_leave disable
  1154.  
  1155. config igmp_snooping querier vlan VLAN10 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1156.  
  1157. config igmp_snooping vlan VLAN11 report_suppression disable
  1158.  
  1159. config igmp_snooping vlan VLAN11 state disable fast_leave disable
  1160.  
  1161. config igmp_snooping querier vlan VLAN11 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1162.  
  1163. config igmp_snooping vlan VLAN12 report_suppression disable
  1164.  
  1165. config igmp_snooping vlan VLAN12 state disable fast_leave disable
  1166.  
  1167. config igmp_snooping querier vlan VLAN12 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1168.  
  1169. config igmp_snooping vlan VLAN14 report_suppression disable
  1170.  
  1171. config igmp_snooping vlan VLAN14 state disable fast_leave disable
  1172.  
  1173. config igmp_snooping querier vlan VLAN14 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1174.  
  1175. config igmp_snooping vlan VLAN15 report_suppression disable
  1176.  
  1177. config igmp_snooping vlan VLAN15 state disable fast_leave disable
  1178.  
  1179. config igmp_snooping querier vlan VLAN15 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1180.  
  1181. config igmp_snooping vlan VLAN16 report_suppression disable
  1182.  
  1183. config igmp_snooping vlan VLAN16 state disable fast_leave disable
  1184.  
  1185. config igmp_snooping querier vlan VLAN16 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1186.  
  1187. config igmp_snooping vlan VLAN17 report_suppression disable
  1188.  
  1189. config igmp_snooping vlan VLAN17 state disable fast_leave disable
  1190.  
  1191. config igmp_snooping querier vlan VLAN17 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1192.  
  1193. config igmp_snooping vlan VLAN18 report_suppression disable
  1194.  
  1195. config igmp_snooping vlan VLAN18 state disable fast_leave disable
  1196.  
  1197. config igmp_snooping querier vlan VLAN18 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1198.  
  1199. config igmp_snooping vlan VLAN26 report_suppression disable
  1200.  
  1201. config igmp_snooping vlan VLAN26 state disable fast_leave disable
  1202.  
  1203. config igmp_snooping querier vlan VLAN26 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1204.  
  1205. config igmp_snooping vlan VLAN27 report_suppression disable
  1206.  
  1207. config igmp_snooping vlan VLAN27 state disable fast_leave disable
  1208.  
  1209. config igmp_snooping querier vlan VLAN27 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1210.  
  1211. config igmp_snooping vlan VLAN28 report_suppression disable
  1212.  
  1213. config igmp_snooping vlan VLAN28 state disable fast_leave disable
  1214.  
  1215. config igmp_snooping querier vlan VLAN28 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1216.  
  1217. config igmp_snooping vlan VLAN29 report_suppression disable
  1218.  
  1219. config igmp_snooping vlan VLAN29 state disable fast_leave disable
  1220.  
  1221. config igmp_snooping querier vlan VLAN29 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1222.  
  1223. config igmp_snooping vlan VLAN30 report_suppression disable
  1224.  
  1225. config igmp_snooping vlan VLAN30 state disable fast_leave disable
  1226.  
  1227. config igmp_snooping querier vlan VLAN30 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1228.  
  1229. config igmp_snooping vlan VLAN31 report_suppression disable
  1230.  
  1231. config igmp_snooping vlan VLAN31 state disable fast_leave disable
  1232.  
  1233. config igmp_snooping querier vlan VLAN31 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1234.  
  1235. config igmp_snooping vlan VLAN32 report_suppression disable
  1236.  
  1237. config igmp_snooping vlan VLAN32 state disable fast_leave disable
  1238.  
  1239. config igmp_snooping querier vlan VLAN32 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1240.  
  1241. config igmp_snooping vlan VLAN33 report_suppression disable
  1242.  
  1243. config igmp_snooping vlan VLAN33 state disable fast_leave disable
  1244.  
  1245. config igmp_snooping querier vlan VLAN33 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1246.  
  1247. config igmp_snooping vlan VLAN34 report_suppression disable
  1248.  
  1249. config igmp_snooping vlan VLAN34 state disable fast_leave disable
  1250.  
  1251. config igmp_snooping querier vlan VLAN34 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1252.  
  1253. config igmp_snooping vlan VLAN35 report_suppression disable
  1254.  
  1255. config igmp_snooping vlan VLAN35 state disable fast_leave disable
  1256.  
  1257. config igmp_snooping querier vlan VLAN35 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1258.  
  1259. config igmp_snooping vlan VLAN36 report_suppression disable
  1260.  
  1261. config igmp_snooping vlan VLAN36 state disable fast_leave disable
  1262.  
  1263. config igmp_snooping querier vlan VLAN36 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1264.  
  1265. config igmp_snooping vlan VLAN37 report_suppression disable
  1266.  
  1267. config igmp_snooping vlan VLAN37 state disable fast_leave disable
  1268.  
  1269. config igmp_snooping querier vlan VLAN37 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1270.  
  1271. config igmp_snooping vlan VLAN39 report_suppression disable
  1272.  
  1273. config igmp_snooping vlan VLAN39 state disable fast_leave disable
  1274.  
  1275. config igmp_snooping querier vlan VLAN39 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1276.  
  1277. config igmp_snooping vlan VLAN40 report_suppression disable
  1278.  
  1279. config igmp_snooping vlan VLAN40 state disable fast_leave disable
  1280.  
  1281. config igmp_snooping querier vlan VLAN40 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1282.  
  1283. config igmp_snooping vlan VLAN58 report_suppression disable
  1284.  
  1285. config igmp_snooping vlan VLAN58 state disable fast_leave disable
  1286.  
  1287. config igmp_snooping querier vlan VLAN58 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1288.  
  1289. config igmp_snooping vlan VLAN61 report_suppression disable
  1290.  
  1291. config igmp_snooping vlan VLAN61 state disable fast_leave disable
  1292.  
  1293. config igmp_snooping querier vlan VLAN61 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1294.  
  1295. config igmp_snooping vlan VLAN77 report_suppression disable
  1296.  
  1297. config igmp_snooping vlan VLAN77 state disable fast_leave disable
  1298.  
  1299. config igmp_snooping querier vlan VLAN77 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1300.  
  1301. config igmp_snooping vlan VLAN84 report_suppression disable
  1302.  
  1303. config igmp_snooping vlan VLAN84 state disable fast_leave disable
  1304.  
  1305. config igmp_snooping querier vlan VLAN84 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1306.  
  1307. config igmp_snooping vlan VLAN90 report_suppression disable
  1308.  
  1309. config igmp_snooping vlan VLAN90 state disable fast_leave disable
  1310.  
  1311. config igmp_snooping querier vlan VLAN90 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1312.  
  1313. config igmp_snooping vlan VLAN91 report_suppression disable
  1314.  
  1315. config igmp_snooping vlan VLAN91 state disable fast_leave disable
  1316.  
  1317. config igmp_snooping querier vlan VLAN91 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1318.  
  1319. config igmp_snooping vlan VLAN97 report_suppression disable
  1320.  
  1321. config igmp_snooping vlan VLAN97 state disable fast_leave disable
  1322.  
  1323. config igmp_snooping querier vlan VLAN97 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1324.  
  1325. config igmp_snooping vlan VLAN98 report_suppression disable
  1326.  
  1327. config igmp_snooping vlan VLAN98 state disable fast_leave disable
  1328.  
  1329. config igmp_snooping querier vlan VLAN98 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1330.  
  1331. config igmp_snooping vlan VLAN99 report_suppression disable
  1332.  
  1333. config igmp_snooping vlan VLAN99 state disable fast_leave disable
  1334.  
  1335. config igmp_snooping querier vlan VLAN99 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1336.  
  1337. config igmp_snooping vlan VLAN100 report_suppression disable
  1338.  
  1339. config igmp_snooping vlan VLAN100 state disable fast_leave disable
  1340.  
  1341. config igmp_snooping querier vlan VLAN100 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1342.  
  1343. config igmp_snooping vlan VLAN101 report_suppression disable
  1344.  
  1345. config igmp_snooping vlan VLAN101 state disable fast_leave disable
  1346.  
  1347. config igmp_snooping querier vlan VLAN101 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1348.  
  1349. config igmp_snooping vlan VLAN108 report_suppression disable
  1350.  
  1351. config igmp_snooping vlan VLAN108 state disable fast_leave disable
  1352.  
  1353. config igmp_snooping querier vlan VLAN108 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1354.  
  1355. config igmp_snooping vlan VLAN115 report_suppression disable
  1356.  
  1357. config igmp_snooping vlan VLAN115 state disable fast_leave disable
  1358.  
  1359. config igmp_snooping querier vlan VLAN115 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1360.  
  1361. config igmp_snooping vlan VLAN117 report_suppression disable
  1362.  
  1363. config igmp_snooping vlan VLAN117 state disable fast_leave disable
  1364.  
  1365. config igmp_snooping querier vlan VLAN117 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1366.  
  1367. config igmp_snooping vlan VLAN124 report_suppression disable
  1368.  
  1369. config igmp_snooping vlan VLAN124 state disable fast_leave disable
  1370.  
  1371. config igmp_snooping querier vlan VLAN124 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1372.  
  1373. config igmp_snooping vlan VLAN125 report_suppression disable
  1374.  
  1375. config igmp_snooping vlan VLAN125 state disable fast_leave disable
  1376.  
  1377. config igmp_snooping querier vlan VLAN125 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1378.  
  1379. config igmp_snooping vlan VLAN130 report_suppression disable
  1380.  
  1381. config igmp_snooping vlan VLAN130 state disable fast_leave disable
  1382.  
  1383. config igmp_snooping querier vlan VLAN130 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1384.  
  1385. config igmp_snooping vlan VLAN138 report_suppression disable
  1386.  
  1387. config igmp_snooping vlan VLAN138 state disable fast_leave disable
  1388.  
  1389. config igmp_snooping querier vlan VLAN138 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1390.  
  1391. config igmp_snooping vlan VLAN140 report_suppression disable
  1392.  
  1393. config igmp_snooping vlan VLAN140 state disable fast_leave disable
  1394.  
  1395. config igmp_snooping querier vlan VLAN140 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1396.  
  1397. config igmp_snooping vlan TV report_suppression disable
  1398.  
  1399. config igmp_snooping vlan TV state disable fast_leave disable
  1400.  
  1401. config igmp_snooping querier vlan TV query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1402.  
  1403. config igmp_snooping vlan TIME report_suppression disable
  1404.  
  1405. config igmp_snooping vlan TIME state disable fast_leave disable
  1406.  
  1407. config igmp_snooping querier vlan TIME query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1408.  
  1409. config igmp_snooping vlan managment report_suppression disable
  1410.  
  1411. config igmp_snooping vlan managment state disable fast_leave disable
  1412.  
  1413. config igmp_snooping querier vlan managment query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1414.  
  1415. config igmp_snooping vlan megafon report_suppression disable
  1416.  
  1417. config igmp_snooping vlan megafon state disable fast_leave disable
  1418.  
  1419. config igmp_snooping querier vlan megafon query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1420.  
  1421. config igmp_snooping vlan inet report_suppression disable
  1422.  
  1423. config igmp_snooping vlan inet state disable fast_leave disable
  1424.  
  1425. config igmp_snooping querier vlan inet query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1426.  
  1427. config igmp_snooping vlan wifi report_suppression disable
  1428.  
  1429. config igmp_snooping vlan wifi state disable fast_leave disable
  1430.  
  1431. config igmp_snooping querier vlan wifi query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1432.  
  1433. config igmp_snooping vlan wifi_ report_suppression disable
  1434.  
  1435. config igmp_snooping vlan wifi_ state disable fast_leave disable
  1436.  
  1437. config igmp_snooping querier vlan wifi_ query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 2
  1438.  
  1439. config limited_multicast_addr ports 1-27 state disable
  1440.  
  1441.  
  1442. # MLDSNP
  1443.  
  1444.  
  1445.  
  1446. # ACCESS_AUTHENTICATION_CONTROL
  1447.  
  1448.  
  1449. config authen_login default method local
  1450.  
  1451. config authen_enable default method local_enable
  1452.  
  1453. config authen application console login default
  1454.  
  1455. config authen application console enable default
  1456.  
  1457. config authen application telnet login default
  1458.  
  1459. config authen application telnet enable default
  1460.  
  1461. config authen application ssh login default
  1462.  
  1463. config authen application ssh enable default
  1464.  
  1465. config authen application http login default
  1466.  
  1467. config authen application http enable default
  1468.  
  1469. config authen parameter response_timeout 30
  1470.  
  1471. config authen parameter attempt 3
  1472.  
  1473. disable authen_policy
  1474. config accounting service network state disable
  1475. config accounting service shell state disable
  1476. config accounting service system state disable
  1477.  
  1478.  
  1479. # AAA_LOCAL_ENABLE_PASSWORD
  1480.  
  1481.  
  1482. # AAA ADMIN PWD LIST
  1483.  
  1484. config admin local_enable
  1485.  
  1486.  
  1487.  
  1488.  
  1489. # AAA ADMIN PWD END
  1490.  
  1491.  
  1492. # NDP
  1493.  
  1494.  
  1495. config ipv6 nd ns ipif System retrans_time 0
  1496.  
  1497. config ipv6 nd ra ipif System state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600
  1498.  
  1499.  
  1500. # RIPng
  1501.  
  1502.  
  1503. disable ripng
  1504.  
  1505. config ripng method split_horizon
  1506.  
  1507. config ripng update 30
  1508.  
  1509. config ripng expire 180
  1510.  
  1511. config ripng garbage_collection 120
  1512.  
  1513. config ripng ipif System state disable metric 1
  1514.  
  1515.  
  1516. # ARP
  1517.  
  1518.  
  1519. config arp_aging time 5
  1520.  
  1521. config gratuitous_arp send ipif_status_up disable
  1522.  
  1523. config gratuitous_arp send dup_ip_detected disable
  1524.  
  1525. config gratuitous_arp learning disable
  1526.  
  1527.  
  1528. # ROUTEFILTER
  1529.  
  1530.  
  1531.  
  1532. # ROUTE
  1533.  
  1534.  
  1535. config route preference static 60
  1536.  
  1537. config route preference default 1
  1538.  
  1539. config route preference rip 100
  1540.  
  1541. config route preference ospfIntra 80
  1542.  
  1543. config route preference ospfInter 90
  1544.  
  1545. config route preference ospfExt1 110
  1546.  
  1547. config route preference ospfExt2 115
  1548.  
  1549. config route preference ebgp 70
  1550.  
  1551. config route preference ibgp 130
  1552.  
  1553. create iproute default 172.16.0.254 1 primary
  1554.  
  1555. config ecmp algorithm ip_destination crc_low
  1556.  
  1557. enable ecmp ospf
  1558.  
  1559.  
  1560. # PROUTE
  1561.  
  1562.  
  1563.  
  1564. # RELAY6
  1565.  
  1566. config dhcpv6_relay hop_count 4
  1567. disable dhcpv6_relay
  1568.  
  1569.  
  1570. # DHCPv6_SERVER
  1571.  
  1572. disable dhcpv6_server
  1573. config dhcpv6_server ipif System state enable
  1574.  
  1575.  
  1576. # IGMP
  1577.  
  1578.  
  1579. config igmp ipif System version 2 query_interval 125 max_response_time 10 robustness_variable 2 state disable
  1580.  
  1581. config igmp ipif System last_member_query_interval 1
  1582.  
  1583. config igmp check_subscriber_source_network ipif System enable
  1584.  
  1585.  
  1586. # PIMSM
  1587.  
  1588.  
  1589. disable pim
  1590.  
  1591. config pim cbsr hash_masklen 30
  1592.  
  1593. config pim cbsr bootstrap_period 60
  1594.  
  1595. config pim register_suppression_time 60
  1596.  
  1597. config pim register_probe_time 5
  1598.  
  1599. config pim last_hop_spt_switchover never
  1600.  
  1601. config pim crp holdtime 150 priority 192
  1602.  
  1603. config pim crp wildcard_prefix_cnt 0
  1604.  
  1605. config pim ipif System state disable hello 30 jp_interval 60 mode dm dr_priority 1
  1606.  
  1607. config pim cbsr ipif System priority -1
  1608.  
  1609.  
  1610. # DVMRP
  1611.  
  1612.  
  1613. disable dvmrp
  1614.  
  1615. config dvmrp ipif System metric 1 probe 10 neighbor_timeout 35 state disable
  1616.  
  1617.  
  1618. # IPMROUTE
  1619.  
  1620.  
  1621.  
  1622. # RIP
  1623.  
  1624.  
  1625. disable rip
  1626.  
  1627. config rip ipif System tx_mode disable state disable
  1628.  
  1629. config rip ipif System rx_mode disable state disable
  1630.  
  1631.  
  1632. # MD5
  1633.  
  1634.  
  1635.  
  1636. # OSPF
  1637.  
  1638.  
  1639. config ospf ipif System area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
  1640.  
  1641. config ospf ipif System authentication none metric 1 state disable passive disable
  1642.  
  1643. config ospf router_id 0.0.0.0
  1644.  
  1645. disable ospf
  1646.  
  1647.  
  1648. # BGP
  1649.  
  1650.  
  1651.  
  1652. # OSPFv3
  1653.  
  1654.  
  1655. config ospfv3 router_id 0.0.0.0
  1656.  
  1657. disable ospfv3
  1658.  
  1659.  
  1660. # DNSR
  1661.  
  1662.  
  1663. disable dnsr
  1664.  
  1665. config dnsr primary nameserver 0.0.0.0
  1666.  
  1667. config dnsr secondary nameserver 0.0.0.0
  1668.  
  1669. disable dnsr cache
  1670.  
  1671. disable dnsr static
  1672.  
  1673.  
  1674. # DHCP_RELAY
  1675.  
  1676. disable dhcp_relay
  1677. config dhcp_relay hops 4 time 0
  1678. config dhcp_relay option_82 state disable
  1679. config dhcp_relay option_82 check disable
  1680. config dhcp_relay option_82 policy replace
  1681. config dhcp_relay option_60 state disable
  1682. config dhcp_relay option_61 state disable
  1683. config dhcp_relay option_60 default mode drop
  1684. config dhcp_relay option_61 default drop
  1685. disable dhcp_local_relay
  1686.  
  1687.  
  1688. # VRRP
  1689.  
  1690.  
  1691. config vrrp ipif System authtype none
  1692.  
  1693. disable vrrp
  1694.  
  1695.  
  1696. disable vrrp ping
  1697.  
  1698.  
  1699.  
  1700. #-------------------------------------------------------------------
  1701.  
  1702. # End of configuration file for DGS-3627G
  1703.  
  1704. #-------------------------------------------------------------------
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!