Command: show config current_config

 


#-------------------------------------------------------------------------------


#                     DGS-3200-10 Gigabit Ethernet Switch


#                                Configuration


#


#                          Firmware: Build 1.00.B015


#           Copyright(C) 2007 D-Link Corporation. All rights reserved.


#-------------------------------------------------------------------------------


 



# STACK




# BASIC



# ACCOUNT LIST



# ACCOUNT END


# PASSWORD ENCRYPTION


disable password encryption


config serial_port auto_logout 10_minutes


enable telnet 23


enable web 80


enable clipaging



# STORM



config traffic trap none


config traffic control  1-10 broadcast disable multicast disable unicast disable action drop threshold 512 countdown 0 time_interval 5



# LOOP_DETECT


disable loopdetect

config loopdetect recover_timer 60 interval 10 mode port-based

config loopdetect ports 1 state disabled

config loopdetect ports 2 state disabled

config loopdetect ports 3 state disabled

config loopdetect ports 4 state disabled

config loopdetect ports 5 state disabled

config loopdetect ports 6 state disabled

config loopdetect ports 7 state disabled

config loopdetect ports 8 state disabled

config loopdetect ports 9 state disabled

config loopdetect ports 10 state disabled



# GM



config sim candidate


disable sim


config sim dp_interval 30


config sim hold_time 100



# GM_H




# SYSLOG



disable syslog


config system_severity log information


config system_severity trap information


config log_save_timing on_demand



# QOS



config scheduling_mechanism strict


config scheduling 0 max_packet 1


config scheduling 1 max_packet 2


config scheduling 2 max_packet 3


config scheduling 3 max_packet 4


config scheduling 4 max_packet 5


config scheduling 5 max_packet 6


config scheduling 6 max_packet 7


config 802.1p user_priority 0  2


config 802.1p user_priority 1  0


config 802.1p user_priority 2  1


config 802.1p user_priority 3  3


config 802.1p user_priority 4  4


config 802.1p user_priority 5  5


config 802.1p user_priority 6  6


config 802.1p user_priority 7  6


config 802.1p default_priority 1-10 0


config bandwidth_control 1-10 rx_rate no_limit tx_rate no_limit



# MIRROR



disable mirror


# TRAF-SEGMENTATION



config traffic_segmentation 1-9 forward_list 10


config traffic_segmentation 10 forward_list all



# SSL



disable ssl


enable ssl ciphersuite RSA_with_RC4_128_MD5


enable ssl ciphersuite RSA_with_3DES_EDE_CBC_SHA


enable ssl ciphersuite DHE_DSS_with_3DES_EDE_CBC_SHA


enable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5


config ssl cachetimeout 600



# PORT



disable jumbo_frame


config ports 1-8 speed auto flow_control disable learning enable state enable


config ports 9-10 medium_type copper speed auto flow_control disable learning enable state enable


config ports 9-10 medium_type fiber speed auto flow_control disable learning enable state enable



# PORT_LOCK



disable port_security trap_log


config port_security ports 1-10 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnReset



# SNMPv3



delete snmp community public


delete snmp community private


delete snmp user initial


delete snmp group initial


delete snmp view restricted all


delete snmp view CommunityView all


config snmp engineID 800000ab03001e58ac71ae


create snmp view restricted 1.3.6.1.2.1.1 view_type included


create snmp view restricted 1.3.6.1.2.1.11 view_type included


create snmp view restricted 1.3.6.1.6.3.10.2.1 view_type included


create snmp view restricted 1.3.6.1.6.3.11.2.1 view_type included


create snmp view restricted 1.3.6.1.6.3.15.1.1 view_type included


create snmp view CommunityView 1 view_type included


create snmp view CommunityView 1.3.6.1.6.3 view_type excluded


create snmp view CommunityView 1.3.6.1.6.3.1 view_type included


create snmp group public v1 read_view CommunityView notify_view CommunityView


create snmp group public v2c read_view CommunityView notify_view CommunityView


create snmp group initial v3  noauth_nopriv read_view restricted notify_view restricted


create snmp group private v1 read_view CommunityView write_view CommunityView notify_view CommunityView


create snmp group private v2c read_view CommunityView write_view CommunityView notify_view CommunityView


create snmp group ReadGroup v1 read_view CommunityView notify_view CommunityView


create snmp group ReadGroup v2c read_view CommunityView notify_view CommunityView


create snmp group WriteGroup v1 read_view CommunityView write_view CommunityView notify_view CommunityView


create snmp group WriteGroup v2c read_view CommunityView write_view CommunityView notify_view CommunityView


create snmp community private view CommunityView read_write


create snmp community public view CommunityView read_only


create snmp user initial initial



# MANAGEMENT



enable snmp traps


enable snmp authenticate_traps


disable rmon



# VLAN



enable pvid auto_assign


config vlan default delete 1-10


config vlan default add untagged 1-10


config vlan default advertisement enable


create vlan diagnet tag 4090


config vlan diagnet add tagged 1-10 advertisement disable


disable gvrp


config gvrp 1-10 state disable ingress_checking enable acceptable_frame admit_all pvid 1



# 8021X



disable 802.1x


config 802.1x auth_mode port_based


config 802.1x auth_protocol radius_eap


config 802.1x capability ports 1-10 none


config 802.1x auth_parameter ports 1-10 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable



# guestvlan




# TR




# ACL



disable cpu_interface_filtering



# FDB



config fdb aging_time 300



# ADDRBIND



disable address_binding acl_mode


disable address_binding trap_log


config address_binding ip_mac ports 1-10 state disable allow_zeroip disable



# MAC_ADDRESS_TABLE_NOTIFICATION



disable mac_notification


config mac_notification interval 1 historysize 1


config mac_notification ports 1-10 disable



# STP



 config stp version rstp


 config stp maxage 20 maxhops 20 forwarddelay 15 txholdcount 6 fbpdu enable hellotime 2


 config stp priority 32768 instance_id 0


 config stp mst_config_id name 00:1E:58:AC:71:AE revision_level 0


 disable stp


 config stp ports 1-10 externalCost auto  edge auto p2p auto state enable restricted_role false restricted_tcn false


 config stp mst_ports 1-10 instance_id 0 internalCost auto priority 128


config stp ports 1-10 fbpdu enable



# SAFEGUARD_ENGINE



config safeguard_engine state disable utilization rising 30 falling 20 trap_log disable mode fuzzy



# BANNER_PROMP



config command_prompt default


config greeting_message default



# SSH



 config ssh algorithm 3DES enable


 config ssh algorithm AES128 enable


 config ssh algorithm AES192 enable


 config ssh algorithm AES256 enable


 config ssh algorithm arcfour enable


 config ssh algorithm blowfish enable


 config ssh algorithm cast128 enable


 config ssh algorithm twofish128 enable


 config ssh algorithm twofish192 enable


 config ssh algorithm twofish256 enable


 config ssh algorithm MD5 enable


 config ssh algorithm SHA1 enable


 config ssh algorithm RSA enable


 config ssh algorithm DSA enable


 config ssh authmode password enable


 config ssh authmode publickey enable


 config ssh authmode hostbased enable


 config ssh server maxsession 8


 config ssh server contimeout 120


 config ssh server authfail 2


 config ssh server rekey never


 disable ssh



# SMTP



disable smtp



# SNTP



disable sntp


config time_zone operator + hour 0 min 0


config sntp primary 0.0.0.0 secondary 0.0.0.0 poll-interval 720


config dst disable



# LACP



config link_aggregation algorithm mac_source_dest


config lacp_port 1-10 mode passive



# IP



config ipif System ipaddress 172.21.27.2/24 vlan diagnet state enable


disable autoconfig



# JWAC



config jwac switch_http_port 80


config jwac clear_quarantine_server_url


config jwac radius_protocol pap


disable jwac quarantine_server_monitor


config jwac quarantine_server_error_timeout 30


enable jwac forcible_logout


enable jwac udp_filtering


enable jwac redirect


config jwac redirect destination quarantine_server delay_time 1


disable jwac


config jwac ports 1-10 max_authenticating_host 10 aging_time 1440 idle_time infinite block_time 0



# MBA


disable mac_based_access_control

config mac_based_access_control ports 1-10 state disable

config mac_based_access_control method local

config mac_based_access_control password default



# MCFILTER




# SNOOP



enable igmp_snooping



# MLDSNP




# ACCESS_AUTHENTICATION_CONTROL



config authen_login default method local


config authen_enable default method  local_enable


config authen application console login default


config authen application console enable default


config authen application telnet login default


config authen application telnet enable default


config authen application ssh login default


config authen application ssh enable default


config authen application http login default


config authen application http enable default


config authen parameter response_timeout 30


config authen parameter attempt 3


disable authen_policy



# AAA_LOCAL_ENABLE_PASSWORD



# AAA ADMIN PWD LIST



# DHCP_RELAY


disable dhcp_relay

config dhcp_relay hops 4 time 0

config dhcp_relay option_82 state disable

config dhcp_relay option_82 check disable

config dhcp_relay option_82 policy replace



# WAC


 config wac method local

 disable wac



# ARP



config arp_aging time 20



# ROUTE



create iproute default 172.21.27.1 1



#-------------------------------------------------------------------


#             End of configuration file for DGS-3200-10


#-------------------------------------------------------------------


DGS-3200-10:4#