class "192.168.1.10:port_num" {
    match if concat(binary-to-ascii(10, 8, ".", packet(24, 4)), ":", binary-to-ascii(10, 8, "", suffix(option agent.circuit-id, 1))) = "192.168.1.10:port_num";
}

subnet 192.168.1.0 netmask 255.255.255.0 {
    pool { range 192.168.1.20; allow members of "192.168.1.10:port_num"; }
    pool { range 192.168.1.21; allow members of "192.168.1.10:port_num"; }
    pool { range 192.168.1.22; allow members of "192.168.1.10:port_num"; }
    pool { range 192.168.1.23; allow members of "192.168.1.10:port_num"; }
    pool { range 192.168.1.24; allow members of "192.168.1.10:port_num"; }
    pool { range 192.168.1.25; allow members of "192.168.1.10:port_num"; }
}

subnet 10.90.90.0 netmask 255.255.255.0 {
option subnet-mask 255.255.255.0;
option broadcast-address 10.90.90.255;
option routers 10.90.90.1;
default-lease-time 3600;
max-lease-time 3600;

        class "b1" { match if substring (hardware, 1, 6) = 00:1b:fc:62:34:aa
                and binary-to-ascii(10, 8, "", substring(option agent.circuit-id, 2, 2)) = "017";
        log(info, "matched class");
         }
        pool { range 10.90.90.91;
         allow members of "b1";
         }
}

Dec 23 17:20:48 ssc dhcpd: DHCPREQUEST for 10.90.90.91 (91.193.172.3) from 00:1b:fc:62:34:aa (lucky) via 10.90.90.90
Dec 23 17:20:48 ssc dhcpd: DHCPACK on 10.90.90.91 to 00:1b:fc:62:34:aa (lucky) via 10.90.90.90
Dec 23 17:20:49 ssc dhcpd: released
Dec 23 17:20:49 ssc dhcpd: DHCPDISCOVER from 00:1b:fc:62:34:aa via vlan17: network 10.90.90.0/24: no free leases
Dec 23 17:20:49 ssc dhcpd: *10.90.90.91|10.90.90.90|00:1b:11:21:7d:22|1|017*
Dec 23 17:20:49 ssc dhcpd: matched class
Dec 23 17:20:49 ssc dhcpd: DHCPDISCOVER from 00:1b:fc:62:34:aa via 10.90.90.90
Dec 23 17:20:49 ssc dhcpd: DHCPOFFER on 10.90.90.91 to 00:1b:fc:62:34:aa (lucky) via 10.90.90.90
Dec 23 17:20:49 ssc dhcpd: released
Dec 23 17:20:49 ssc dhcpd: DHCPREQUEST for 10.90.90.91 (91.193.172.3) from 00:1b:fc:62:34:aa via vlan17: lease 10.90.90.91 unavailable.
Dec 23 17:20:49 ssc dhcpd: DHCPNAK on 10.90.90.91 to 00:1b:fc:62:34:aa via vlan17
Dec 23 17:20:49 ssc dhcpd: *10.90.90.91|10.90.90.90|00:1b:11:21:7d:22|1|017*
Dec 23 17:20:49 ssc dhcpd: matched class
Dec 23 17:20:49 ssc dhcpd: *10.90.90.91|10.90.90.90|00:1b:11:21:7d:22|1|017*
Dec 23 17:20:49 ssc dhcpd: DHCPREQUEST for 10.90.90.91 (91.193.172.3) from 00:1b:fc:62:34:aa (lucky) via 10.90.90.90
Dec 23 17:20:49 ssc dhcpd: DHCPACK on 10.90.90.91 to 00:1b:fc:62:34:aa (lucky) via 10.90.90.90
Dec 23 18:20:50 ssc dhcpd: expired

#-------------------------------------------------------------------------------

#                      DGS-3612G Gigabit Ethernet Switch

#                                Configuration

#

#                           Firmware: Build 2.20-B54

#           Copyright(C) 2007 D-Link Corporation. All rights reserved.

#-------------------------------------------------------------------------------

 


# DOUBLE_VLAN

disable double_vlan


# BASIC


# ACCOUNT LIST

# ACCOUNT END

config serial_port auto_logout 10_minutes

enable telnet 23

enable web 80

enable clipaging


# STORM


config traffic trap none

config traffic control  1-12 broadcast disable multicast disable dlf disable action drop threshold 131072 countdown 0 time_interval 5


# GM


config sim candidate

disable sim

config sim dp_interval 30

config sim hold_time 100


# GM_H



# SYSLOG


disable syslog

config system_severity log information

config system_severity trap information

config log_save_timing on_demand


# QOS


config scheduling_mechanism strict

config scheduling 0 max_packet 1

config scheduling 1 max_packet 2

config scheduling 2 max_packet 3

config scheduling 3 max_packet 4

config scheduling 4 max_packet 5

config scheduling 5 max_packet 6

config scheduling 6 max_packet 7

config 802.1p user_priority 0  2

config 802.1p user_priority 1  0

config 802.1p user_priority 2  1

config 802.1p user_priority 3  3

config 802.1p user_priority 4  4

config 802.1p user_priority 5  5

config 802.1p user_priority 6  6

config 802.1p user_priority 7  6

enable hol_prevention

config 802.1p default_priority 1-12 0

config bandwidth_control 1-12 rx_rate no_limit tx_rate no_limit


# MIRROR


disable mirror


# TRAF-SEGMENTATION

config traffic_segmentation 1-12 forward_list all


# SSL


disable ssl

enable ssl ciphersuite RSA_with_RC4_128_MD5

enable ssl ciphersuite RSA_with_3DES_EDE_CBC_SHA

enable ssl ciphersuite DHE_DSS_with_3DES_EDE_CBC_SHA

enable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5

config ssl cachetimeout 600


# PORT


disable jumbo_frame

config ports 1-8 speed auto flow_control disable learning enable state enable

config ports 9-12 medium_type copper speed auto flow_control disable learning enable state enable

config ports 9-12 medium_type fiber speed auto flow_control disable learning enable state enable


# PORT_LOCK


config port_security ports 1-12 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnReset


# SNMPv3


delete snmp community public

delete snmp community private

delete snmp user initial

delete snmp group initial

delete snmp group ReadGroup

delete snmp group WriteGroup

delete snmp view restricted all

delete snmp view CommunityView all

config snmp engineID 800000ab03001cf026d800

create snmp view restricted 1.3.6.1.2.1.1 view_type included

create snmp view restricted 1.3.6.1.2.1.11 view_type included

create snmp view restricted 1.3.6.1.6.3.10.2.1 view_type included

create snmp view restricted 1.3.6.1.6.3.11.2.1 view_type included

create snmp view restricted 1.3.6.1.6.3.15.1.1 view_type included

create snmp view CommunityView 1 view_type included

create snmp view CommunityView 1.3.6.1.6.3 view_type excluded

create snmp view CommunityView 1.3.6.1.6.3.1 view_type included

create snmp group public v1 read_view CommunityView notify_view CommunityView

create snmp group public v2c read_view CommunityView notify_view CommunityView

create snmp group initial v3  noauth_nopriv read_view restricted notify_view restricted

create snmp group private v1 read_view CommunityView write_view CommunityView notify_view CommunityView

create snmp group private v2c read_view CommunityView write_view CommunityView notify_view CommunityView

create snmp group ReadGroup v1 read_view CommunityView notify_view CommunityView

create snmp group ReadGroup v2c read_view CommunityView notify_view CommunityView

create snmp group WriteGroup v1 read_view CommunityView write_view CommunityView notify_view CommunityView

create snmp group WriteGroup v2c read_view CommunityView write_view CommunityView notify_view CommunityView

create snmp community private view CommunityView read_write

create snmp community public view CommunityView read_only

create snmp user initial initial


# MANAGEMENT


enable snmp traps

enable snmp authenticate_traps

disable rmon


# VLAN


config vlan default delete 1-12

config vlan default add untagged 1-12

config vlan default advertisement enable

disable gvrp

config gvrp 1-12 state disable ingress_checking enable acceptable_frame admit_all pvid 1


# PROTOCOL_VLAN



# 8021X


disable 802.1x

config 802.1x auth_protocol radius_eap

config 802.1x capability ports 1-12 none

config 802.1x auth_parameter ports 1-12 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable


# guestvlan



# TR



# ACL


disable cpu_interface_filtering


# LIMITED_MULTICAST_RANGE



# MULTICAST_VLAN



# FDB


config fdb aging_time 300


# ADDRBIND


disable address_binding acl_mode

disable address_binding trap_log


# MAC_ADDRESS_TABLE_NOTIFICATION


disable mac_notification

config mac_notification interval 1 historysize 1

config mac_notification ports 1-12 disable


# STP


 config stp version rstp

 config stp maxage 20 maxhops 20 forwarddelay 15 txholdcount 3 fbpdu enable hellotime 2 lbd enable lbd_recover_timer 60

 config stp priority 32768 instance_id 0

 config stp mst_config_id name 00:1C:F0:26:D8:00 revision_level 0

 disable stp

 config stp ports 1-12 externalCost auto  edge false p2p auto state enable lbd disable

 config stp mst_ports 1-12 instance_id 0 internalCost auto priority 128

config stp ports 1-12 fbpdu enable


# SAFEGUARD_ENGINE


config safeguard_engine state disable utilization rising 30 falling 20 trap_log disable mode fuzzy


# BANNER_PROMP


config command_prompt default

config greeting_message default


# SSH


 config ssh algorithm 3DES enable

 config ssh algorithm AES128 enable

 config ssh algorithm AES192 enable

 config ssh algorithm AES256 enable

 config ssh algorithm arcfour enable

 config ssh algorithm blowfish enable

 config ssh algorithm cast128 enable

 config ssh algorithm twofish128 enable

 config ssh algorithm twofish192 enable

 config ssh algorithm twofish256 enable

 config ssh algorithm MD5 enable

 config ssh algorithm SHA1 enable

 config ssh algorithm RSA enable

 config ssh algorithm DSA enable

 config ssh authmode password enable

 config ssh authmode publickey enable

 config ssh authmode hostbased enable

 config ssh server maxsession 8

 config ssh server contimeout 120

 config ssh server authfail 2

 config ssh server rekey never

 disable ssh


# SNTP


disable sntp

config time_zone operator + hour 0 min 0

config sntp primary 0.0.0.0 secondary 0.0.0.0 poll-interval 720

config dst disable


# LACP


config link_aggregation algorithm ip_source

config lacp_port 1-12 mode passive


# IP


config ipif System ipaddress 192.168.200.15/24 vlan default

enable autoconfig


# MCFILTER


config multicast filtering_mode default forward_unregistered_groups


# SNOOP


config igmp_snooping vlan default host_timeout 260 router_timeout 260 leave_timer 2 state disable fast_leave disable

config igmp_snooping querier vlan default query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable

config limited_multicast_addr ports 1-12 state disable


# MLDSNP


config mld_snooping vlan default node_timeout 260 router_timeout 260 done_timer 2 state disable fast_done disable

config mld_snooping querier vlan default query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable


# ACCESS_AUTHENTICATION_CONTROL


config authen_login default method local

config authen_enable default method  local_enable

config authen application console login default

config authen application console enable default

config authen application telnet login default

config authen application telnet enable default

config authen application ssh login default

config authen application ssh enable default

config authen application http login default

config authen application http enable default

config authen parameter response_timeout 30

config authen parameter attempt 3

disable authen_policy


# AAA_LOCAL_ENABLE_PASSWORD


# AAA ADMIN PWD LIST

config admin local_enable




# AAA ADMIN PWD END


# NDP


config ipv6 nd ns ipif System retrans_time 0

config ipv6 nd ra ipif System state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600


# WAC

 config wac method local
 disable wac


# ARP


config arp_aging time 20


# ROUTE


config route preference static 60

config route preference rip 100

config route preference ospfIntra 80

config route preference ospfInter 90

config route preference ospfExt1 110

config route preference ospfExt2 115

create iproute default 192.168.200.254 1 primary


# PROUTE



# IGMP


config igmp ipif System version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable

config igmp ipif System last_member_query_interval 1 


# PIMSM


disable pim

config pim cbsr hash_masklen 30

config pim cbsr bootstrap_period 60

config pim register_suppression_time 60

config pim register_probe_time 5

config pim last_hop_spt_switchover never

config pim crp holdtime 150 priority 192

config pim crp wildcard_prefix_cnt 0

config pim ipif System state disable hello 30 jp_interval 60 mode dm dr_priority 1

config pim cbsr ipif System priority -1


# DVMRP


disable dvmrp

config dvmrp ipif System metric 1 probe 10 neighbor_timeout 35 state disable


# RIP


disable rip

config rip ipif System tx_mode disable state disable

config rip ipif System rx_mode disable state disable


# MD5



# SFLOW



# OSPF


config ospf ipif System area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40

config ospf ipif System authentication none metric 1 state disable passive disable

config ospf router_id 0.0.0.0

disable ospf


# DNSR


disable dnsr

config dnsr primary nameserver 0.0.0.0

config dnsr secondary nameserver 0.0.0.0

disable dnsr cache

disable dnsr static


# DHCP_RELAY

enable dhcp_relay
config dhcp_relay hops 4 time 0
config dhcp_relay option_82 state enable
config dhcp_relay option_82 check disable
config dhcp_relay option_82 policy replace
config dhcp_relay add ipif System 192.168.200.254


# DHCP_SERVER

config dhcp ping_packets 2
config dhcp ping_timeout 500
disable dhcp_server


# VRRP


config vrrp ipif System authtype none

disable vrrp


disable vrrp ping



#-------------------------------------------------------------------

#             End of configuration file for DGS-3612G

#-------------------------------------------------------------------