GS-3312SR:4#sh sw
Command: show switch

Device Type : DGS-3312SR Gigabit-Ethernet Switch
Module 1 Type : DEM-340MG 4-port mini-GBIC (SFP) module
Module 2 Type : DEM-340MG 4-port mini-GBIC (SFP) module
Unit ID : 15
MAC Address : 00-1E-58-6E-4C-80
IP Address : 192.168.15.71 (Manual)
VLAN Name : default
Subnet Mask : 255.255.255.0
Default Gateway : 192.168.15.254
Boot PROM Version : Build 2.00.003
Firmware Version : Build 3.60-S22
Hardware Version : 0A2
Device S/N :
System Name :
System Location :
System Contact :
Spanning Tree : Disabled
GVRP : Disabled
IGMP Snooping : Enabled
TELNET : Enabled (TCP 23)
WEB : Enabled (TCP 80)
RMON : Disabled
RIP : Disabled
DVMRP : Disabled
PIM-DM : Disabled
OSPF : Disabled

DGS-3312SR:4#sh con cu
Command: show config current_config


# BASIC

config serial_port baud_rate 9600 auto_logout 10_minutes
enable telnet 23
enable web 80

# STORM

config traffic control 15:1-15:12 broadcast disable multicast disable dlf disable threshold 128

# GM

config sim candidate
disable sim
config sim dp_interval 30
config sim hold_time 100

# SYSLOG

disable syslog

# QOS

config scheduling_mechanism round_robin
config scheduling_mechanism round_robin
config scheduling_mechanism round_robin
config scheduling_mechanism round_robin
config scheduling_mechanism round_robin
config scheduling_mechanism round_robin
config scheduling_mechanism round_robin
config scheduling_mechanism round_robin
config 802.1p user_priority 0 2
config 802.1p user_priority 1 0
config 802.1p user_priority 2 1
config 802.1p user_priority 3 3
config 802.1p user_priority 4 4
config 802.1p user_priority 5 5
config 802.1p user_priority 6 6
config 802.1p user_priority 7 7
config 802.1p default_priority 15:1-15:12 1
config bandwidth_control 15:1 rx_rx_rate no_limit
config bandwidth_control 15:1 tx_rate no_limit
config bandwidth_control 15:2-15:12 rx_rate no_limit
config bandwidth_control 15:2 tx_rate no_limit
config bandwidth_control 15:3 tx_rate no_limit
config bandwidth_control 15:4 tx_rate no_limit
config bandwidth_control 15:5-15:12 tx_rate no_limit

# MIRROR

disable mirror

# TRAF-SEGMENTATION

config traffic_segmentation 15:1-15:12 forward_list 15:1-15:12

# STACK


# PORT

config ports 15:1,15:5-15:6,15:8-15:9 speed auto flow_control disable learning enable state enable
config ports 15:2 speed auto flow_control disable learning enable state enable description Lenina-2
config ports 15:3 speed auto flow_control disable learning enable state enable description Lenina-3
config ports 15:4 speed auto flow_control disable learning enable state enable description Lenina-5
config ports 15:7 speed auto flow_control disable learning enable state enable description Pushkina-3
config ports 15:10 speed auto flow_control disable learning enable state enable description Pushkina-12
config ports 15:11 speed auto flow_control disable learning enable state enable description Lenina-14
config ports 15:12 speed auto flow_control disable learning enable state enable description input

# PORT_LOCK

config port_security ports 15:1-15:12 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnReset

# 8021X

disable 802.1x
config 802.1x auth_protocol radius_eap
config 802.1x capability ports 15:1-15:12 none
config 802.1x auth_parameter ports 15:1 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x auth_parameter ports 15:2-15:12 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable

# SNMPv3

delete snmp community public
delete snmp community private
delete snmp user initial
delete snmp group initial
delete snmp view restricted all
delete snmp view CommunityView all
config snmp engineID 000000000
create snmp view snmp 1 view_type included
create snmp group snmp v3 auth_nopriv read_view snmp write_view snmp notify_view snmp
create snmp user snmp snmp encrypted by_key auth md5 bc46adas03d2dedrd432943rfdsdf310b121b0 priv none

# MANAGEMENT

disable snmp traps
enable snmp authenticate traps
disable rmon

# VLAN

config vlan default delete 15:1-15:12
config vlan default delete
config vlan default add tagged 15:1-15:4,15:7,15:10-15:12
config vlan default add untagged 15:5-15:6,15:8-15:9
config vlan default advertisement enable
create vlan 210 tag 210
config vlan 210 add tagged 15:1-15:4,15:7,15:10-15:12 advertisement disable
disable gvrp
config gvrp 15:1-15:12 state disable ingress_checking enable acceptable_frame admit_all pvid 1

# FDB

config fdb aging_time 300

# MAC_ADDRESS_TABLE_NOTIFICATION

config mac_notification interval 1 historysize 1
disable mac_notification
config mac_notification ports 15:1-15:12 disable

# STP

config stp version rstp
config stp maxage 20 maxhops 20 forwarddelay 15 txholdcount 3 fbpdu enable hellotime 2
config stp priority 32768 instance_id 0
config stp mst_config_id name revision_level 0
disable stp
config stp ports 15:1-15:12 externalCost auto edge false p2p auto state enable
config stp mst_ports 15:1 instance_id 0 internalCost auto priority 128
config stp mst_ports 15:2 instance_id 0 internalCost auto priority 128
config stp mst_ports 15:3 instance_id 0 internalCost auto priority 128
config stp mst_ports 15:4 instance_id 0 internalCost auto priority 128
config stp mst_ports 15:5 instance_id 0 internalCost auto priority 128
config stp mst_ports 15:6-15:12 instance_id 0 internalCost auto priority 128

# ACL


# SNTP

enable sntp
config time_zone operator + hour 4 min 0
config sntp primary 192.168.168.168 secondary 0.0.0.0 poll-interval 21600
config dst disable

# LACP

config link_aggregation algorithm ip_source
config lacp_port 15:1-15:12 mode passive

# IP

config ipif System vlan default ipaddress 192.168.15.71/24 state enable

# SNOOP

enable igmp_snooping
config igmp_snooping default host_timeout 260 router_timeout 260 leave_timer 2 state disable
config igmp_snooping querier default query_interval 125 max_response_time 10 robustness_variable 2
config igmp_snooping querier default last_member_query_interval 1 state disable
config igmp_snooping 210 host_timeout 260 router_timeout 260 leave_timer 2 state enable
config igmp_snooping querier 210 query_interval 125 max_response_time 10 robustness_variable 2
config igmp_snooping querier 210 last_member_query_interval 1 state disable
config router_ports 210 add 15:12

# ACCESS_AUTHENTICATION_CONTROL

config authen_login default method local
config authen_enable default method local_enable
config authen application console login default
config authen application console enable default
config authen application telnet login default
config authen application telnet enable default
config authen application ssh login default
config authen application ssh enable default
config authen application http login default
config authen application http enable default
config authen parameter response_timeout 30
config authen parameter attempt 3
disable authen_policy

# AAA_LOCAL_ENABLE_PASSWORD

config admin local_enable

# ROUTE

config route preference static 60
config route preference rip 100
config route preference ospfIntra 80
config route preference ospfInter 90
config route preference ospfExt1 110
config route preference ospfExt2 115
create iproute default 192.168.15.254 1

# ARP

config arp_aging time 20

# IGMP

config igmp ipif System version 2 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif System last_member_query_interval 1

# PIM

disable pim
config pim ipif System hello 30 jp_interval 60 state disable

# DVMRP

disable dvmrp
config dvmrp ipif System metric 1 probe 10 neighbor_timeout 35 state disable

# RIP

config rip ipif System tx_mode disable rx_mode disable state disable
config rip ipif System authentication disable
disable rip

# MD5


# OSPF

config ospf ipif System area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40 metric 1 authentication none state disable
config ospf router_id 0.0.0.0
disable ospf

# DNSR

disable dnsr
config dnsr primary nameserver 0.0.0.0
config dnsr secondary nameserver 0.0.0.0
disable dnsr cache
disable dnsr static

# BOOTP

disable bootp_relay
config bootp_relay hops 4 time 0

# VRRP

config vrrp ipif System authtype none
disable vrrp

disable vrrp ping


# SSL

enable ssl ciphersuite RSA_with_RC4_128_MD5
enable ssl ciphersuite RSA_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite DHE_DSS_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5
disable ssl

# SSH

config ssh algorithm 3DES enable
config ssh algorithm AES128 enable
config ssh algorithm AES192 enable
config ssh algorithm AES256 enable
config ssh algorithm arcfour enable
config ssh algorithm blowfish enable
config ssh algorithm cast128 enable
config ssh algorithm twofish128 enable
config ssh algorithm twofish192 enable
config ssh algorithm twofish256 enable
config ssh algorithm MD5 enable
config ssh algorithm SHA1 enable
config ssh algorithm RSA enable
config ssh algorithm DSA enable
config ssh authmode hostbased enable
config ssh authmode password enable
config ssh authmode publickey enable
config ssh user admin auth Password
config ssh server maxsession 8 contimeout 300 authfail 2 rekey never port 22
disable ssh



DGS-3312SR:4#sh fdb
Command: show fdb

Unicast MAC Address Aging Time = 300
...
...
Total Entries : 371

DGS-3312SR:4#sh arp
Command: show arpentry


ARP Aging Time : 20
...
...
Total Entries: 43