config traffic control 2-24 broadcast enable multicast enable unicast enable broadcast_threshold 64 multicast_threshold 64 unicast_threshold 8128 countdown 5
# LOOP_DETECT
enable loopdetect
config loopdetect ports 2-24 state enable
config loopdetect trap both
# TRAF-SEGMENTATION
config traffic_segmentation 1 forward_list 1-24
config traffic_segmentation 2-24 forward_list 1
# PORT
config ports 2-8 medium_type fiber speed 100_full
config ports 9-24 speed 100_full
# VLAN
config vlan default delete 2-24
config vlan default advertisement disable
create vlan vlan113 tag 113
config vlan vlan113 add tagged 1
config vlan vlan113 add untagged 2-24 advertisement disable
config port_vlan 2-24 gvrp_state disable ingress_checking enable acceptable_frame admit_all pvid 113
# PORT_SECURITY
config port_security trap state enable
config port_security log state enable
config port_security ports 2-24 admin_state enable max_learning_addr 1 action drop lock_address_mode permanent
# DhcpServerScreening
config filter dhcp_server ports 2-24 state enable
# ARPSpoofingPrevention
config arp_spoofing_prevention add  gateway_ip 1.2.3.4 gateway_mac 00-00-00-4D-39-80 ports 2-24
# STP
config stp ports 2-24 externalCost auto edge false p2p auto state disable restricted_role false restricted_tcn false
# BPDU_PROTECTION
config bpdu_protection ports 2-24 state enable
config bpdu_protection ports 1-24 mode drop
# SAFEGUARD_ENGINE
config safeguard_engine state enable
# SNTP
config sntp  poll-interval 100
config sntp primary 192.168.1.11