!----------------------------------------------------------------------
!
!        DGS-3100-48P Gigabit stackable PoE L2 Managed Switch         
!                            Configuration                             
!
!                       Firmware: Build 3.60.28                       
!     Copyright(C) 2008 D-Link Corporation. All rights reserved.       
!----------------------------------------------------------------------
 
! BASIC
 
 
! SNMP
 
disable snmp
create snmp community ******* view DefaultSuper read_write
create snmp community ****** view Default read_only
config snmp system_contact admin@domain.ru
config snmp system_location MOSCOW
config snmp system_name MSK-DLNK-SW1
 
! AUTHENTICATION
 
config authen_login https_method_list method radius local
create authen_login method_list_name MSK
config authen_login method_list_name MSK method radius local
create authen_enable method_list_name MSK
config authen_enable method_list_name MSK method radius local_enable
config authen application telnet login MSK
config authen application telnet enable MSK
config authen application ssh login MSK
config authen application ssh enable MSK
create authen server_host 172.16.77.220 protocol radius port 1812 key "passwordKeyRADIUS" timeout 3 retransmit 3 priority second
create authen server_host 172.16.77.222 protocol radius port 1812 key "passwordKeyRADIUS" timeout 3 retransmit 3 priority first
 
! NETWORK MONITORING
 
 
! LINK AGGREGATION
 
 
! PORT
 
 
! VLAN
 
create vlan USER tag 100
create vlan PRN tag 106
create vlan VOICE tag 110
create vlan WIFI tag 120
create vlan NVR tag 125
create vlan MGMT tag 501
config vlan USER add tagged 1:(45-48)
config vlan USER add untagged 1:(5-44)
config vlan PRN add tagged 1:(45-48)
config vlan VOICE add tagged 1:(45-48)
config vlan WIFI add tagged 1:(45-48)
config vlan WIFI add untagged 1:(1-4)
config vlan NVR add tagged 1:(45-48)
config vlan MGMT add tagged 1:(45-48)
enable gvrp
config gvrp 1:(1-4) pvid 120
config gvrp 1:(5-44) pvid 100
config gvrp 1:(45-48) state enable
config vlan_trunk ports 1:(45-47) state enable
 
! FORWARDING TABLE
 
 
! BROADCAST STORM CONTROL
 
 
! PORT MIRRORING
 
 
! QOS
 
 
! MULTIPLE SPANNING TREE
 
 
! IGMP SNOOPING
 
 
! 802.1X
 
config 802.1x auth_protocol radius
 
! SNTP
 
 
! SSH
 
enable ssh

! SSL
 
 
! BASIC IP
 
config ipif System ipaddress 172.20.20.5/25 vlan MGMT
 
! ROUTING TABLE
 
create iproute default 172.20.20.1
 
! ARP
 
 
! LACP
 
 
! PORT SECURITY
 
 
! STACK
 
 
! POE
 
 
! TRAFFIC SEGMENTATION
 
 
! ACCESS CONTROL LIST
 
 
! HISTORY
 
 
! SAFEGUARD
 
 
! DOWNLOAD

 
! LLDP
 
enable lldp
config lldp ports 1:(1-48) notification enable
config lldp ports 1:(1-48) mgt_addr enable
enable lldp forward_message
 
! MLD SNOOPING
 
 
! VOICE VLAN
 
config voice_vlan enable vlanid 110
config voice_vlan add 1:(1-44) mode secure
config voice_vlan oui-table add 001d70 description CISCO