# VLAN


enable pvid auto_assign

config vlan default delete 1-27

config vlan default add untagged 21

config vlan default advertisement enable

create vlan v101 tag 101

config vlan v101 add untagged 22 advertisement disable

create vlan v102 tag 102

config vlan v102 add untagged 24 advertisement disable

disable qinq

disable gvrp

disable vlan_trunk

config gvrp 1-21,23,25-27 state disable ingress_checking enable acceptable_frame admit_all pvid 1

config gvrp 22 state disable ingress_checking enable acceptable_frame admit_all pvid 101

config gvrp 24 state disable ingress_checking enable acceptable_frame admit_all pvid 102




# ACL


disable cpu_interface_filtering


# ADDRBIND


config address_binding ip_mac ports 1-27 forward_dhcppkt enable

disable address_binding dhcp_snoop

disable address_binding dhcp_snoop ipv6

disable address_binding nd_snoop

disable address_binding trap_log

config address_binding dhcp_snoop max_entry ports 1-27 limit no_limit



# IP


config ipif_mac_mapping ipif System mac_offset 0

config ipif System ipaddress 10.90.90.90/8 vlan default

config ipif System dhcpv6_client disable

config ipif System  ip_directed_broadcast  disable

config ipif System proxy_arp disable local disable

config ipif_mac_mapping ipif net1 mac_offset 1

create ipif net1 192.168.1.254/24 v101 state enable

config ipif net1 proxy_arp disable local disable

config ipif_mac_mapping ipif net2 mac_offset 2

create ipif net2 172.20.20.14/30 v102 state enable

config ipif net2 proxy_arp disable local disable

config ipif net1 ip_mtu 1500

config ipif net2 ip_mtu 1500

config ipif System ip_mtu 1500

config ipif net1 dhcpv6_client disable

config ipif net2 dhcpv6_client disable

config ipif System dhcpv6_client disable

config ipif net1  ip_directed_broadcast  disable

config ipif net2  ip_directed_broadcast  disable

config ipif System  ip_directed_broadcast  disable

disable autoconfig


# MCFILTER


config multicast filtering_mode default forward_all_groups

config multicast filtering_mode v101 forward_all_groups

config multicast filtering_mode v102 forward_all_groups


# SNOOP


enable igmp_snooping

config igmp_snooping vlan default report_suppression disable

config igmp_snooping vlan default state enable fast_leave disable

config igmp_snooping querier vlan default query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3

config igmp_snooping vlan VLAN22 report_suppression disable

config igmp_snooping vlan VLAN22 fast_leave disable

config igmp_snooping querier vlan VLAN22 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3

config igmp_snooping vlan v101 report_suppression disable

config igmp_snooping vlan v101 state enable fast_leave disable

config igmp_snooping querier vlan v101 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3

config igmp_snooping vlan v102 report_suppression disable

config igmp_snooping vlan v102 state enable fast_leave disable

config igmp_snooping querier vlan v102 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3

config limited_multicast_addr ports 1-27 state disable


# IGMP


config igmp ipif System version 2 query_interval 125 max_response_time 10 robustness_variable 2 state enable

config igmp ipif System last_member_query_interval 1 

config igmp check_subscriber_source_network ipif System enable 

config igmp ipif net1 version 2 query_interval 125 max_response_time 10 robustness_variable 2 state enable

config igmp ipif net1 last_member_query_interval 1 

config igmp check_subscriber_source_network ipif net1 enable 

config igmp ipif net2 version 2 query_interval 125 max_response_time 10 robustness_variable 2 state enable

config igmp ipif net2 last_member_query_interval 1 

config igmp check_subscriber_source_network ipif net2 enable 


# PIMSM


enable pim

config pim cbsr hash_masklen 30

config pim cbsr bootstrap_period 60

config pim register_suppression_time 60

config pim register_probe_time 5

config pim last_hop_spt_switchover never

config pim crp holdtime 150 priority 192

config pim crp wildcard_prefix_cnt 0

config pim ipif System state enable hello 30 jp_interval 60 mode dm dr_priority 1

config pim cbsr ipif System priority -1

config pim ipif net1 state enable hello 30 jp_interval 60 mode dm dr_priority 1

config pim cbsr ipif net1 priority -1

config pim ipif net2 state enable hello 30 jp_interval 60 mode dm dr_priority 1

config pim cbsr ipif net2 priority -1


# RIP


disable rip

config rip ipif System tx_mode disable state disable

config rip ipif System rx_mode disable state disable

config rip ipif net1 tx_mode disable state disable

config rip ipif net1 rx_mode disable state disable

config rip ipif net2 tx_mode disable state disable

config rip ipif net2 rx_mode disable state disable


# MD5



# OSPF


config ospf ipif System area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40

config ospf ipif System authentication none metric 1 state disable passive disable

config ospf ipif net2 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40

config ospf ipif net2 authentication none metric 1 state disable passive disable

config ospf ipif net1 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40

config ospf ipif net1 authentication none metric 1 state disable passive disable

config ospf router_id 0.0.0.0

disable ospf


# BGP


# OSPFv3

config ospfv3 router_id 0.0.0.0

disable ospfv3

disable asymmetric_vlan

config vlan default delete 1-26

config vlan default add untagged 1-26

config vlan default advertisement enable

disable gvrp

config gvrp 1-26 state disable ingress_checking enable acceptable_frame admit_all pvid 1


# FDB



config fdb aging_time 300

config multicast port_filtering_mode 1-24 forward_unregistered_groups

config multicast port_filtering_mode 25-26 filter_unregistered_groups




# ACL



disable cpu_interface_filtering



# SNOOP



enable igmp_snooping

config igmp_snooping default host_timeout 260 router_timeout 260 leave_timer 2 state enable

config igmp_snooping querier default query_interval 125 max_response_time 10 robustness_variable 2

config igmp_snooping querier default last_member_query_interval 1 state disable

config limited_multicast_addr ports 1-26 access deny state disable