#-----------------------------------------------------------------
# DGS-3200-16 Gigabit Ethernet Switch
# Configuration
#
# Firmware: Build 1.62.B020
# Copyright(C) 2009 D-Link Corporation. All rights reserved.
#-----------------------------------------------------------------
# STACK
# BASIC
# STORM
config traffic trap none
config egress_filter ports 1-16 unicast disable multicast disable
config traffic control 1-16 broadcast disable multicast disable unicast disable action drop threshold 512 countdown 0 time_interval 5
# LOOP_DETECT
disable loopdetect
config loopdetect recover_timer 60 interval 10 mode port-based
config loopdetect trap none
config loopdetect ports 1-16 state disable
# GM
config sim candidate
disable sim
config sim dp_interval 30
config sim hold_time 100
config sim trap enable
# GM_H
# QOS
config scheduling_mechanism strict
config scheduling 0 max_packet 1
config scheduling 1 max_packet 2
config scheduling 2 max_packet 3
config scheduling 3 max_packet 4
config scheduling 4 max_packet 5
config scheduling 5 max_packet 6
config scheduling 6 max_packet 7
config scheduling 7 max_packet 8
config 802.1p user_priority 0 2
config 802.1p user_priority 1 0
config 802.1p user_priority 2 1
config 802.1p user_priority 3 3
config 802.1p user_priority 4 4
config 802.1p user_priority 5 5
config 802.1p user_priority 6 6
config 802.1p user_priority 7 7
config 802.1p default_priority 1-16 0
config bandwidth_control 1-10,14,16 rx_rate no_limit tx_rate no_limit
config bandwidth_control 11-13,15 rx_rate no_limit tx_rate 64
# MIRROR
config mirror port 15 add source ports 1,3 rx
config mirror port 15 add source ports 1,3 tx
disable mirror
# TRAF-SEGMENTATION
config traffic_segmentation 1-16 forward_list all
# SSL
disable ssl
enable ssl ciphersuite RSA_with_RC4_128_MD5
enable ssl ciphersuite RSA_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite DHE_DSS_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5
config ssl cachetimeout 600
# PORT
enable jumbo_frame
config ports 1-14 speed auto flow_control disable learning enable state enable
config ports 15-16 medium_type copper speed auto flow_control disable learning enable state enable
config ports 15-16 medium_type fiber speed auto flow_control disable learning enable state enable
# OAM
# DDM
config ddm trap enable
config ddm log enable
config ddm ports 15-16 state enable shutdown alarm
# PORT_LOCK
disable port_security trap_log
config port_security ports 1-16 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnReset
# SNMPv3
delete snmp community public
delete snmp community private
delete snmp user initial
delete snmp group ReadGroup
delete snmp group WriteGroup
delete snmp group initial
delete snmp view restricted all
delete snmp view CommunityView all
config snmp engineID 800000ab03001e584c325c
create snmp view restricted 1.3.6.1.2.1.1 view_type included
create snmp view restricted 1.3.6.1.2.1.11 view_type included
create snmp view restricted 1.3.6.1.6.3.10.2.1 view_type included
create snmp view restricted 1.3.6.1.6.3.11.2.1 view_type included
create snmp view restricted 1.3.6.1.6.3.15.1.1 view_type included
create snmp view CommunityView 1 view_type included
create snmp view CommunityView 1.3.6.1.6.3 view_type excluded
create snmp view CommunityView 1.3.6.1.6.3.1 view_type included
create snmp group public v1 read_view CommunityView notify_view CommunityView
create snmp group public v2c read_view CommunityView notify_view CommunityView
create snmp group initial v3 noauth_nopriv read_view restricted notify_view restricted
create snmp group private v1 read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group private v2c read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group ni3Guath v1 read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group ni3Guath v2c read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group xee7Moon v1 read_view CommunityView notify_view CommunityView
create snmp group xee7Moon v2c read_view CommunityView notify_view CommunityView
create snmp group ReadGroup v1 read_view CommunityView notify_view CommunityView
create snmp group ReadGroup v2c read_view CommunityView notify_view CommunityView
create snmp group WriteGroup v1 read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group WriteGroup v2c read_view CommunityView write_view CommunityView notify_view CommunityView
# MANAGEMENT
enable snmp traps
enable snmp authenticate_traps
enable snmp
enable snmp linkchange_traps
config snmp linkchange_traps ports 1 enable
config snmp linkchange_traps ports 2 enable
config snmp linkchange_traps ports 3 enable
config snmp linkchange_traps ports 4 enable
config snmp linkchange_traps ports 5 enable
config snmp linkchange_traps ports 6 enable
config snmp linkchange_traps ports 7 enable
config snmp linkchange_traps ports 8 enable
config snmp linkchange_traps ports 9 enable
config snmp linkchange_traps ports 10 enable
config snmp linkchange_traps ports 11 enable
config snmp linkchange_traps ports 12 enable
config snmp linkchange_traps ports 13 enable
config snmp linkchange_traps ports 14 enable
config snmp linkchange_traps ports 15 enable
config snmp linkchange_traps ports 16 enable
disable rmon
# TRAP
config snmp coldstart_traps enable
config snmp warmstart_traps enable
# VLAN
enable pvid auto_assign
config vlan default delete 1-16
config vlan default advertisement enable
create vlan 2 tag 2
config vlan 2 add tagged 1-3,16
config vlan 2 add untagged 5,8-9 advertisement disable
create vlan 4 tag 4
config vlan 4 add tagged 4,16 advertisement disable
create vlan 20 tag 20
config vlan 20 add tagged 1-4,16 advertisement disable
create vlan 30 tag 30
config vlan 30 add tagged 1,16 advertisement disable
create vlan 32 tag 32
config vlan 32 add tagged 1-4,16 advertisement disable
create vlan 44 tag 44
config vlan 44 add tagged 1,4,16
config vlan 44 add untagged 6,10 advertisement disable
create vlan 45 tag 45
config vlan 45 add tagged 1,4,16
config vlan 45 add untagged 7 advertisement disable
create vlan 46 tag 46
config vlan 46 add tagged 1,4,16 advertisement disable
create vlan 50 tag 50
config vlan 50 add tagged 1-4,16
config vlan 50 add untagged 11-13,15 advertisement disable
create vlan 60 tag 60
config vlan 60 add tagged 1,4,16 advertisement disable
create vlan 61 tag 61
config vlan 61 add tagged 1,4,16 advertisement disable
create vlan 62 tag 62
config vlan 62 add tagged 4,16 advertisement disable
create vlan 63 tag 63
config vlan 63 add tagged 1,4,16 advertisement disable
create vlan 64 tag 64
config vlan 64 add tagged 4,16 advertisement disable
create vlan 70 tag 70
config vlan 70 add tagged 1,16
config vlan 70 add untagged 14 advertisement disable
create vlan 98 tag 98
config vlan 98 add tagged 1-2,16 advertisement disable
create vlan 99 tag 99
config vlan 99 add tagged 1-4,16 advertisement disable
create vlan 100 tag 100
config vlan 100 add tagged 1,16 advertisement disable
create vlan 103 tag 103
config vlan 103 add tagged 1,4,16 advertisement disable
create vlan 105 tag 105
config vlan 105 add tagged 1,16 advertisement disable
create vlan 114 tag 114
config vlan 114 add tagged 1,16 advertisement disable
create vlan 117 tag 117
config vlan 117 add tagged 4,16 advertisement disable
create vlan 118 tag 118
config vlan 118 add tagged 1,16 advertisement disable
create vlan 119 tag 119
config vlan 119 add tagged 1,16 advertisement disable
create vlan 120 tag 120
config vlan 120 add tagged 1,16 advertisement disable
create vlan 223 tag 223
config vlan 223 add tagged 1,16 advertisement disable
create vlan 228 tag 228
config vlan 228 add tagged 1,16 advertisement disable
create vlan 233 tag 233
config vlan 233 add tagged 4,16 advertisement disable
create vlan 500 tag 500
config vlan 500 add tagged 1,16 advertisement disable
create vlan 501 tag 501
config vlan 501 add tagged 1,16 advertisement disable
create vlan 1495 tag 1495
config vlan 1495 add tagged 1,16 advertisement disable
create vlan 1496 tag 1496
config vlan 1496 add tagged 1,16 advertisement disable
create vlan 2012 tag 2012
config vlan 2012 add tagged 1,16 advertisement disable
create vlan 2022 tag 2022
config vlan 2022 add tagged 1,16 advertisement disable
create vlan 2045 tag 2045
config vlan 2045 add tagged 1,16 advertisement disable
create vlan 2048 tag 2048
config vlan 2048 add tagged 1,16 advertisement disable
create vlan 2103 tag 2103
config vlan 2103 add tagged 1-2,16 advertisement disable
create vlan 2107 tag 2107
config vlan 2107 add tagged 1,16 advertisement disable
create vlan 2137 tag 2137
config vlan 2137 add tagged 1,16 advertisement disable
create vlan 2148 tag 2148
config vlan 2148 add tagged 1,16 advertisement disable
create vlan 2149 tag 2149
config vlan 2149 add tagged 3,16 advertisement disable
create vlan 2215 tag 2215
config vlan 2215 add tagged 1,16 advertisement disable
create vlan 2238 tag 2238
config vlan 2238 add tagged 4,16 advertisement disable
create vlan 2300 tag 2300
config vlan 2300 add tagged 1,16 advertisement disable
create vlan 2301 tag 2301
config vlan 2301 add tagged 1,16 advertisement disable
create vlan 2317 tag 2317
config vlan 2317 add tagged 4,16 advertisement disable
create vlan 2331 tag 2331
config vlan 2331 add tagged 1,16 advertisement disable
create vlan 2344 tag 2344
config vlan 2344 add tagged 16 advertisement disable
create vlan 2351 tag 2351
config vlan 2351 add tagged 4,16 advertisement disable
create vlan 2360 tag 2360
config vlan 2360 add tagged 1,16 advertisement disable
create vlan 2372 tag 2372
config vlan 2372 add tagged 1,16 advertisement disable
create vlan 2392 tag 2392
config vlan 2392 add tagged 1,16 advertisement disable
create vlan 3045 tag 3045
config vlan 3045 add tagged 1,16 advertisement disable
create vlan 3048 tag 3048
config vlan 3048 add tagged 1,16 advertisement disable
create vlan 3050 tag 3050
config vlan 3050 add tagged 1,16 advertisement disable
create vlan 3900 tag 3900
config vlan 3900 add tagged 1,16 advertisement disable
disable gvrp
disable vlan_trunk
config vlan_trunk ports 15 state enable
config gvrp 1-4,16 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 5,8-9 state disable ingress_checking enable acceptable_frame admit_all pvid 2
config gvrp 6,10 state disable ingress_checking enable acceptable_frame admit_all pvid 44
config gvrp 7 state disable ingress_checking enable acceptable_frame admit_all pvid 45
config gvrp 11-13,15 state disable ingress_checking enable acceptable_frame admit_all pvid 50
config gvrp 14 state disable ingress_checking enable acceptable_frame admit_all pvid 70
# PROTOCOL_VLAN
# 8021X
disable 802.1x
config 802.1x auth_mode port_based
config 802.1x auth_protocol radius_eap
config 802.1x capability ports 1-16 none
config 802.1x auth_parameter ports 1-16 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
# guestvlan
# TR
# ACL
disable cpu_interface_filtering
# FDB
config fdb aging_time 300
# ADDRBIND
config address_binding dhcp_snoop max_entry ports 1 limit no_limit
config address_binding dhcp_snoop max_entry ports 1 limit no_limit ipv6
config address_binding nd_snoop ports 1 max_entry no_limit
config address_binding dhcp_snoop max_entry ports 2 limit no_limit
config address_binding dhcp_snoop max_entry ports 2 limit no_limit ipv6
config address_binding nd_snoop ports 2 max_entry no_limit
config address_binding dhcp_snoop max_entry ports 3 limit no_limit
config address_binding dhcp_snoop max_entry ports 3 limit no_limit ipv6
config address_binding nd_snoop ports 3 max_entry no_limit
config address_binding dhcp_snoop max_entry ports 4 limit no_limit
config address_binding dhcp_snoop max_entry ports 4 limit no_limit ipv6
config address_binding nd_snoop ports 4 max_entry no_limit
config address_binding dhcp_snoop max_entry ports 5 limit no_limit
config address_binding dhcp_snoop max_entry ports 5 limit no_limit ipv6
config address_binding nd_snoop ports 5 max_entry no_limit
config address_binding dhcp_snoop max_entry ports 6 limit no_limit
config address_binding dhcp_snoop max_entry ports 6 limit no_limit ipv6
config address_binding nd_snoop ports 6 max_entry no_limit
config address_binding dhcp_snoop max_entry ports 7 limit no_limit
config address_binding dhcp_snoop max_entry ports 7 limit no_limit ipv6
config address_binding nd_snoop ports 7 max_entry no_limit
config address_binding dhcp_snoop max_entry ports 8 limit no_limit
config address_binding dhcp_snoop max_entry ports 8 limit no_limit ipv6
config address_binding nd_snoop ports 8 max_entry no_limit
config address_binding dhcp_snoop max_entry ports 9 limit no_limit
config address_binding dhcp_snoop max_entry ports 9 limit no_limit ipv6
config address_binding nd_snoop ports 9 max_entry no_limit
config address_binding dhcp_snoop max_entry ports 10 limit no_limit
config address_binding dhcp_snoop max_entry ports 10 limit no_limit ipv6
config address_binding nd_snoop ports 10 max_entry no_limit
config address_binding dhcp_snoop max_entry ports 11 limit no_limit
config address_binding dhcp_snoop max_entry ports 11 limit no_limit ipv6
config address_binding nd_snoop ports 11 max_entry no_limit
config address_binding dhcp_snoop max_entry ports 12 limit no_limit
config address_binding dhcp_snoop max_entry ports 12 limit no_limit ipv6
config address_binding nd_snoop ports 12 max_entry no_limit
config address_binding dhcp_snoop max_entry ports 13 limit no_limit
config address_binding dhcp_snoop max_entry ports 13 limit no_limit ipv6
config address_binding nd_snoop ports 13 max_entry no_limit
config address_binding dhcp_snoop max_entry ports 14 limit no_limit
config address_binding dhcp_snoop max_entry ports 14 limit no_limit ipv6
config address_binding nd_snoop ports 14 max_entry no_limit
config address_binding dhcp_snoop max_entry ports 15 limit no_limit
config address_binding dhcp_snoop max_entry ports 15 limit no_limit ipv6
config address_binding nd_snoop ports 15 max_entry no_limit
config address_binding dhcp_snoop max_entry ports 16 limit no_limit
config address_binding dhcp_snoop max_entry ports 16 limit no_limit ipv6
config address_binding nd_snoop ports 16 max_entry no_limit
config address_binding ip_mac ports 1 stop_learning_threshold 0
config address_binding ip_mac ports 2 stop_learning_threshold 0
config address_binding ip_mac ports 3 stop_learning_threshold 0
config address_binding ip_mac ports 4 stop_learning_threshold 0
config address_binding ip_mac ports 5 stop_learning_threshold 0
config address_binding ip_mac ports 6 stop_learning_threshold 0
config address_binding ip_mac ports 7 stop_learning_threshold 0
config address_binding ip_mac ports 8 stop_learning_threshold 0
config address_binding ip_mac ports 9 stop_learning_threshold 0
config address_binding ip_mac ports 10 stop_learning_threshold 0
config address_binding ip_mac ports 11 stop_learning_threshold 0
config address_binding ip_mac ports 12 stop_learning_threshold 0
config address_binding ip_mac ports 13 stop_learning_threshold 0
config address_binding ip_mac ports 14 stop_learning_threshold 0
config address_binding ip_mac ports 15 stop_learning_threshold 0
config address_binding ip_mac ports 16 stop_learning_threshold 0
config address_binding ip_mac ports 1-16 forward_dhcppkt enable
disable address_binding dhcp_snoop
disable address_binding dhcp_snoop ipv6
disable address_binding nd_snoop
disable address_binding trap_log
disable address_binding arp_inspection
# DhcpServerScreening
config filter dhcp_server trap_log disable
config filter dhcp_server illegal_server_log_suppress_duration 5min
# ARPSpoofingPrevention
# MAC_ADDRESS_TABLE_NOTIFICATION
disable mac_notification
config mac_notification interval 1 historysize 1
config mac_notification ports 1-16 disable
# STP
config stp version rstp
config stp maxage 20 maxhops 20 forwarddelay 15 txholdcount 6 fbpdu enable hellotime 2
config stp priority 32768 instance_id 0
config stp mst_config_id name 00:1E:58:B5:2A:5C revision_level 0
disable stp
config stp trap new_root enable
config stp trap topo_change enable
config stp ports 1-16 externalCost auto edge auto p2p auto state enable restricted_role false restricted_tcn false
config stp mst_ports 1-16 instance_id 0 internalCost auto priority 128
config stp ports 1-16 fbpdu enable
# MULTI FILTER
create mcast_filter_profile profile_id 20 profile_name 20
create mcast_filter_profile profile_id 21 profile_name 21
config mcast_filter_profile profile_id 20 add 239.1.1.1-239.5.255.255
config mcast_filter_profile profile_id 21 add 224.2.127.254-224.2.127.254
config limited_multicast_addr ports 1-16 add profile_id 20 access permit
config limited_multicast_addr ports 1-16 add profile_id 21 access permit
config max_mcast_group ports 1-16 max_group 256
# SAFEGUARD_ENGINE
config safeguard_engine state disable utilization rising 30 falling 20 trap_log disable mode fuzzy
# BANNER_PROMP
config command_prompt SW-OFFICECORE
config greeting_message default
# SSH
config ssh algorithm 3DES enable
config ssh algorithm AES128 enable
config ssh algorithm AES192 enable
config ssh algorithm AES256 enable
config ssh algorithm arcfour enable
config ssh algorithm blowfish enable
config ssh algorithm cast128 enable
config ssh algorithm twofish128 enable
config ssh algorithm twofish192 enable
config ssh algorithm twofish256 enable
config ssh algorithm MD5 enable
config ssh algorithm SHA1 enable
config ssh algorithm RSA enable
config ssh algorithm DSA enable
config ssh authmode password enable
config ssh authmode publickey enable
config ssh authmode hostbased enable
config ssh server maxsession 8
config ssh server contimeout 120
config ssh server authfail 2
config ssh server rekey never
config ssh user root authmode password
disable ssh
# LACP
config link_aggregation algorithm mac_source_dest
config lacp_port 1-16 mode passive
# WAC
config wac switch_http_port 80
config wac virtual_ip 1.1.1.1
config wac method local
disable wac
config wac ports 1-16 aging_time 1440 idle_time 60 block_time 60
# JWAC
config jwac switch_http_port 80
config jwac clear_quarantine_server_url
config jwac radius_protocol pap
disable jwac quarantine_server_monitor
config jwac quarantine_server_error_timeout 30
enable jwac forcible_logout
enable jwac udp_filtering
enable jwac redirect
config jwac redirect destination quarantine_server delay_time 1
disable jwac
config jwac authenticate_page english
config jwac ports 1-16 mode host_based max_authenticating_host 10 aging_time 1440 idle_time infinite block_time 0
# PowerSaving
config power_saving state enable
config power_saving length_detection enable
# MULTICAST_VLAN
# MBA
disable mac_based_access_control
config mac_based_access_control trap enable
enable authorization network
config mac_based_access_control ports 1-16 state disable
config mac_based_access_control ports 1-16 mode host_based
config mac_based_access_control method local
config mac_based_access_control password default
# MCFILTER
config multicast vlan_filtering_mode vlan 50 filter_unregistered_groups
# MULTI_AUTHEN
config authentication ports 1-16 auth_mode host_based
config authentication ports 1-16 multi_authen_methods none
enable authorization network
config authentication server failover block
# SNOOP
enable igmp_snooping
config igmp_snooping vlan 50 host_timeout 260 router_timeout 260 leave_timer 2 state enable fast_leave enable
config igmp_snooping querier vlan 50 query_interval 10 max_response_time 5 robustness_variable 2 last_member_query_interval 1 state enable version 2
config igmp_snooping data_driven_learning vlan 50 state disable aged_out disable
config igmp_snooping data_driven_learning max_learned_entry 56
config igmp access_authentication ports 1-16 state disable
# MLDSNP
# ACCESS_AUTHENTICATION_CONTROL
# DHCP_LOCAL_RELAY
disable dhcp_local_relay
# AAA_LOCAL_ENABLE_PASSWORD
# AAA ADMIN PWD LIST
config admin local_enable
# AAA ADMIN PWD END
# DHCP_RELAY
disable dhcp_relay
config dhcp_relay hops 4 time 0
config dhcp_relay option_82 state disable
config dhcp_relay option_82 check disable
config dhcp_relay option_82 policy replace
# NDP
config ipv6 nd ns ipif iptv retrans_time 0
# ARP
config arp_aging time 20
# ROUTE
create iproute default 10.255.255.1 1
#-----------------------------------------------------------------
# End of configuration file for DGS-3200-16
#-----------------------------------------------------------------