# TRAF-SEGMENTATION

config traffic_segmentation 1-24 forward_list 25-26
config traffic_segmentation 25-26 forward_list 1-26

# PORT

config ports 1-25 speed auto flow_control disable mdix auto learning enable state enable trap disable

# PORT_LOCK

disable port_security trap_log
config port_security ports 1-26 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnReset



# FDB

config fdb aging_time 300
config multicast port_filtering_mode 1-26 forward_unregistered_groups

# MAC_ADDRESS_TABLE_NOTIFICATION

config mac_notification interval 1 historysize 1
disable mac_notification
config mac_notification ports 1-26 disable



# ACL

create access_profile ip source_ip_mask 255.255.255.255 profile_id 1

create access_profile ip destination_ip_mask 255.255.255.255 profile_id 2
config access_profile profile_id 2 add access_id 1 ip destination_ip 10.4.0.1 port 1 permit
config access_profile profile_id 2 add access_id 2 ip destination_ip 10.4.0.1 port 2 permit
config access_profile profile_id 2 add access_id 3 ip destination_ip 10.4.0.1 port 3 permit
config access_profile profile_id 2 add access_id 4 ip destination_ip 10.4.0.1 port 4 permit
config access_profile profile_id 2 add access_id 5 ip destination_ip 10.4.0.1 port 5 permit
config access_profile profile_id 2 add access_id 6 ip destination_ip 10.4.0.1 port 6 permit
config access_profile profile_id 2 add access_id 7 ip destination_ip 10.4.0.1 port 7 permit
config access_profile profile_id 2 add access_id 8 ip destination_ip 10.4.0.1 port 8 permit
config access_profile profile_id 2 add access_id 9 ip destination_ip 10.4.0.1 port 9 permit
config access_profile profile_id 2 add access_id 10 ip destination_ip 10.4.0.1 port 10 permit
config access_profile profile_id 2 add access_id 11 ip destination_ip 10.4.0.1 port 11 permit
config access_profile profile_id 2 add access_id 12 ip destination_ip 10.4.0.1 port 12 permit
config access_profile profile_id 2 add access_id 13 ip destination_ip 10.4.0.1 port 13 permit
config access_profile profile_id 2 add access_id 14 ip destination_ip 10.4.0.1 port 14 permit
config access_profile profile_id 2 add access_id 15 ip destination_ip 10.4.0.1 port 15 permit
config access_profile profile_id 2 add access_id 16 ip destination_ip 10.4.0.1 port 16 permit
config access_profile profile_id 2 add access_id 17 ip destination_ip 10.4.0.1 port 17 permit
config access_profile profile_id 2 add access_id 18 ip destination_ip 10.4.0.1 port 18 permit
config access_profile profile_id 2 add access_id 19 ip destination_ip 10.4.0.1 port 19 permit
config access_profile profile_id 2 add access_id 20 ip destination_ip 10.4.0.1 port 20 permit
config access_profile profile_id 2 add access_id 21 ip destination_ip 10.4.0.1 port 21 permit
config access_profile profile_id 2 add access_id 22 ip destination_ip 10.4.0.1 port 22 permit
config access_profile profile_id 2 add access_id 23 ip destination_ip 10.4.0.1 port 23 permit
config access_profile profile_id 2 add access_id 24 ip destination_ip 10.4.0.1 port 24 permit
config access_profile profile_id 2 add access_id 25 ip destination_ip 10.4.0.11 port 1 permit
config access_profile profile_id 2 add access_id 26 ip destination_ip 10.4.0.11 port 2 permit
config access_profile profile_id 2 add access_id 27 ip destination_ip 10.4.0.11 port 3 permit
config access_profile profile_id 2 add access_id 28 ip destination_ip 10.4.0.11 port 4 permit
config access_profile profile_id 2 add access_id 29 ip destination_ip 10.4.0.11 port 5 permit
config access_profile profile_id 2 add access_id 30 ip destination_ip 10.4.0.11 port 6 permit
config access_profile profile_id 2 add access_id 31 ip destination_ip 10.4.0.11 port 7 permit
config access_profile profile_id 2 add access_id 32 ip destination_ip 10.4.0.11 port 8 permit
config access_profile profile_id 2 add access_id 33 ip destination_ip 10.4.0.11 port 9 permit
config access_profile profile_id 2 add access_id 34 ip destination_ip 10.4.0.11 port 10 permit
config access_profile profile_id 2 add access_id 35 ip destination_ip 10.4.0.11 port 11 permit
config access_profile profile_id 2 add access_id 36 ip destination_ip 10.4.0.11 port 12 permit
config access_profile profile_id 2 add access_id 37 ip destination_ip 10.4.0.11 port 13 permit
config access_profile profile_id 2 add access_id 38 ip destination_ip 10.4.0.11 port 14 permit
config access_profile profile_id 2 add access_id 39 ip destination_ip 10.4.0.11 port 15 permit
config access_profile profile_id 2 add access_id 40 ip destination_ip 10.4.0.11 port 16 permit
config access_profile profile_id 2 add access_id 41 ip destination_ip 10.4.0.11 port 17 permit
config access_profile profile_id 2 add access_id 42 ip destination_ip 10.4.0.11 port 18 permit
config access_profile profile_id 2 add access_id 43 ip destination_ip 10.4.0.11 port 19 permit
config access_profile profile_id 2 add access_id 44 ip destination_ip 10.4.0.11 port 20 permit
config access_profile profile_id 2 add access_id 45 ip destination_ip 10.4.0.11 port 21 permit
config access_profile profile_id 2 add access_id 46 ip destination_ip 10.4.0.11 port 22 permit
config access_profile profile_id 2 add access_id 47 ip destination_ip 10.4.0.11 port 23 permit
config access_profile profile_id 2 add access_id 48 ip destination_ip 10.4.0.11 port 24 permit

create access_profile ethernet source_mac FF-FF-FF-FF-FF-FF profile_id 3
config access_profile profile_id 3 add access_id 1 ethernet source_mac нужный-мак-0 port 1 permit
config access_profile profile_id 3 add access_id 2 ethernet source_mac нужный-мак-0 port 2 permit
config access_profile profile_id 3 add access_id 3 ethernet source_mac нужный-мак-0 port 3 permit
config access_profile profile_id 3 add access_id 4 ethernet source_mac нужный-мак-0 port 4 permit
config access_profile profile_id 3 add access_id 5 ethernet source_mac нужный-мак-0 port 5 permit
config access_profile profile_id 3 add access_id 6 ethernet source_mac нужный-мак-0 port 6 permit
config access_profile profile_id 3 add access_id 7 ethernet source_mac нужный-мак-0 port 7 permit
config access_profile profile_id 3 add access_id 8 ethernet source_mac нужный-мак-0 port 8 permit
config access_profile profile_id 3 add access_id 9 ethernet source_mac нужный-мак-0 port 9 permit
config access_profile profile_id 3 add access_id 10 ethernet source_mac нужный-мак-0 port 10 permit
config access_profile profile_id 3 add access_id 11 ethernet source_mac нужный-мак-0 port 11 permit
config access_profile profile_id 3 add access_id 12 ethernet source_mac нужный-мак-0 port 12 permit
config access_profile profile_id 3 add access_id 13 ethernet source_mac нужный-мак-0 port 13 permit
config access_profile profile_id 3 add access_id 14 ethernet source_mac нужный-мак-0 port 14 permit
config access_profile profile_id 3 add access_id 15 ethernet source_mac нужный-мак-0 port 15 permit
config access_profile profile_id 3 add access_id 16 ethernet source_mac нужный-мак-0 port 16 permit
config access_profile profile_id 3 add access_id 17 ethernet source_mac нужный-мак-0 port 17 permit
config access_profile profile_id 3 add access_id 18 ethernet source_mac нужный-мак-0 port 18 permit
config access_profile profile_id 3 add access_id 19 ethernet source_mac нужный-мак-0 port 19 permit
config access_profile profile_id 3 add access_id 20 ethernet source_mac нужный-мак-0 port 20 permit
config access_profile profile_id 3 add access_id 21 ethernet source_mac нужный-мак-0 port 21 permit
config access_profile profile_id 3 add access_id 22 ethernet source_mac нужный-мак-0 port 22 permit
config access_profile profile_id 3 add access_id 23 ethernet source_mac нужный-мак-0 port 23 permit
config access_profile profile_id 3 add access_id 24 ethernet source_mac нужный-мак-0 port 24 permit

create access_profile ethernet destination_mac FF-FF-FF-FF-FF-FF profile_id 4
config access_profile profile_id 4 add access_id 1 ethernet destination_mac нужный-мак-1 port 1 permit
config access_profile profile_id 4 add access_id 2 ethernet destination_mac нужный-мак-1 port 2 permit
config access_profile profile_id 4 add access_id 3 ethernet destination_mac нужный-мак-1 port 3 permit
config access_profile profile_id 4 add access_id 4 ethernet destination_mac нужный-мак-1 port 4 permit
config access_profile profile_id 4 add access_id 5 ethernet destination_mac нужный-мак-1 port 5 permit
config access_profile profile_id 4 add access_id 6 ethernet destination_mac нужный-мак-1 port 6 permit
config access_profile profile_id 4 add access_id 7 ethernet destination_mac нужный-мак-1 port 7 permit
config access_profile profile_id 4 add access_id 8 ethernet destination_mac нужный-мак-1 port 8 permit
config access_profile profile_id 4 add access_id 9 ethernet destination_mac нужный-мак-1 port 9 permit
config access_profile profile_id 4 add access_id 10 ethernet destination_mac нужный-мак-1 port 10 permit
config access_profile profile_id 4 add access_id 11 ethernet destination_mac нужный-мак-1 port 11 permit
config access_profile profile_id 4 add access_id 12 ethernet destination_mac нужный-мак-1 port 12 permit
config access_profile profile_id 4 add access_id 13 ethernet destination_mac нужный-мак-1 port 13 permit
config access_profile profile_id 4 add access_id 14 ethernet destination_mac нужный-мак-1 port 14 permit
config access_profile profile_id 4 add access_id 15 ethernet destination_mac нужный-мак-1 port 15 permit
config access_profile profile_id 4 add access_id 16 ethernet destination_mac нужный-мак-1 port 16 permit
config access_profile profile_id 4 add access_id 17 ethernet destination_mac нужный-мак-1 port 17 permit
config access_profile profile_id 4 add access_id 18 ethernet destination_mac нужный-мак-1 port 18 permit
config access_profile profile_id 4 add access_id 19 ethernet destination_mac нужный-мак-1 port 19 permit
config access_profile profile_id 4 add access_id 20 ethernet destination_mac нужный-мак-1 port 20 permit
config access_profile profile_id 4 add access_id 21 ethernet destination_mac нужный-мак-1 port 21 permit
config access_profile profile_id 4 add access_id 22 ethernet destination_mac нужный-мак-1 port 22 permit
config access_profile profile_id 4 add access_id 23 ethernet destination_mac нужный-мак-1 port 23 permit
config access_profile profile_id 4 add access_id 24 ethernet destination_mac нужный-мак-1 port 24 permit
config access_profile profile_id 4 add access_id 25 ethernet destination_mac FF-FF-FF-FF-FF-FF port 1 permit
config access_profile profile_id 4 add access_id 26 ethernet destination_mac FF-FF-FF-FF-FF-FF port 2 permit
config access_profile profile_id 4 add access_id 27 ethernet destination_mac FF-FF-FF-FF-FF-FF port 3 permit
config access_profile profile_id 4 add access_id 28 ethernet destination_mac FF-FF-FF-FF-FF-FF port 4 permit
config access_profile profile_id 4 add access_id 29 ethernet destination_mac FF-FF-FF-FF-FF-FF port 5 permit
config access_profile profile_id 4 add access_id 30 ethernet destination_mac FF-FF-FF-FF-FF-FF port 6 permit
config access_profile profile_id 4 add access_id 31 ethernet destination_mac FF-FF-FF-FF-FF-FF port 7 permit
config access_profile profile_id 4 add access_id 32 ethernet destination_mac FF-FF-FF-FF-FF-FF port 8 permit
config access_profile profile_id 4 add access_id 33 ethernet destination_mac FF-FF-FF-FF-FF-FF port 9 permit
config access_profile profile_id 4 add access_id 34 ethernet destination_mac FF-FF-FF-FF-FF-FF port 10 permit
config access_profile profile_id 4 add access_id 35 ethernet destination_mac FF-FF-FF-FF-FF-FF port 11 permit
config access_profile profile_id 4 add access_id 36 ethernet destination_mac FF-FF-FF-FF-FF-FF port 12 permit
config access_profile profile_id 4 add access_id 37 ethernet destination_mac FF-FF-FF-FF-FF-FF port 13 permit
config access_profile profile_id 4 add access_id 38 ethernet destination_mac FF-FF-FF-FF-FF-FF port 14 permit
config access_profile profile_id 4 add access_id 39 ethernet destination_mac FF-FF-FF-FF-FF-FF port 15 permit
config access_profile profile_id 4 add access_id 40 ethernet destination_mac FF-FF-FF-FF-FF-FF port 16 permit
config access_profile profile_id 4 add access_id 41 ethernet destination_mac FF-FF-FF-FF-FF-FF port 17 permit
config access_profile profile_id 4 add access_id 42 ethernet destination_mac FF-FF-FF-FF-FF-FF port 18 permit
config access_profile profile_id 4 add access_id 43 ethernet destination_mac FF-FF-FF-FF-FF-FF port 19 permit
config access_profile profile_id 4 add access_id 44 ethernet destination_mac FF-FF-FF-FF-FF-FF port 20 permit
config access_profile profile_id 4 add access_id 45 ethernet destination_mac FF-FF-FF-FF-FF-FF port 21 permit
config access_profile profile_id 4 add access_id 46 ethernet destination_mac FF-FF-FF-FF-FF-FF port 22 permit
config access_profile profile_id 4 add access_id 47 ethernet destination_mac FF-FF-FF-FF-FF-FF port 23 permit
config access_profile profile_id 4 add access_id 48 ethernet destination_mac FF-FF-FF-FF-FF-FF port 24 permit

create access_profile ethernet ethernet_type profile_id 5
config access_profile profile_id 5 add access_id 1 ethernet ethernet_type 0x8863 port 1 permit
config access_profile profile_id 5 add access_id 2 ethernet ethernet_type 0x8863 port 2 permit
config access_profile profile_id 5 add access_id 3 ethernet ethernet_type 0x8863 port 3 permit
config access_profile profile_id 5 add access_id 4 ethernet ethernet_type 0x8863 port 4 permit
config access_profile profile_id 5 add access_id 5 ethernet ethernet_type 0x8863 port 5 permit
config access_profile profile_id 5 add access_id 6 ethernet ethernet_type 0x8863 port 6 permit
config access_profile profile_id 5 add access_id 7 ethernet ethernet_type 0x8863 port 7 permit
config access_profile profile_id 5 add access_id 8 ethernet ethernet_type 0x8863 port 8 permit
config access_profile profile_id 5 add access_id 9 ethernet ethernet_type 0x8863 port 9 permit
config access_profile profile_id 5 add access_id 10 ethernet ethernet_type 0x8863 port 10 permit
config access_profile profile_id 5 add access_id 11 ethernet ethernet_type 0x8863 port 11 permit
config access_profile profile_id 5 add access_id 12 ethernet ethernet_type 0x8863 port 12 permit
config access_profile profile_id 5 add access_id 13 ethernet ethernet_type 0x8863 port 13 permit
config access_profile profile_id 5 add access_id 14 ethernet ethernet_type 0x8863 port 14 permit
config access_profile profile_id 5 add access_id 15 ethernet ethernet_type 0x8863 port 15 permit
config access_profile profile_id 5 add access_id 16 ethernet ethernet_type 0x8863 port 16 permit
config access_profile profile_id 5 add access_id 17 ethernet ethernet_type 0x8863 port 17 permit
config access_profile profile_id 5 add access_id 18 ethernet ethernet_type 0x8863 port 18 permit
config access_profile profile_id 5 add access_id 19 ethernet ethernet_type 0x8863 port 19 permit
config access_profile profile_id 5 add access_id 20 ethernet ethernet_type 0x8863 port 20 permit
config access_profile profile_id 5 add access_id 21 ethernet ethernet_type 0x8863 port 21 permit
config access_profile profile_id 5 add access_id 22 ethernet ethernet_type 0x8863 port 22 permit
config access_profile profile_id 5 add access_id 23 ethernet ethernet_type 0x8863 port 23 permit
config access_profile profile_id 5 add access_id 24 ethernet ethernet_type 0x8863 port 24 permit
config access_profile profile_id 5 add access_id 25 ethernet ethernet_type 0x8864 port 1 permit
config access_profile profile_id 5 add access_id 26 ethernet ethernet_type 0x8864 port 2 permit
config access_profile profile_id 5 add access_id 27 ethernet ethernet_type 0x8864 port 3 permit
config access_profile profile_id 5 add access_id 28 ethernet ethernet_type 0x8864 port 4 permit
config access_profile profile_id 5 add access_id 29 ethernet ethernet_type 0x8864 port 5 permit
config access_profile profile_id 5 add access_id 30 ethernet ethernet_type 0x8864 port 6 permit
config access_profile profile_id 5 add access_id 31 ethernet ethernet_type 0x8864 port 7 permit
config access_profile profile_id 5 add access_id 32 ethernet ethernet_type 0x8864 port 8 permit
config access_profile profile_id 5 add access_id 33 ethernet ethernet_type 0x8864 port 9 permit
config access_profile profile_id 5 add access_id 34 ethernet ethernet_type 0x8864 port 10 permit
config access_profile profile_id 5 add access_id 35 ethernet ethernet_type 0x8864 port 11 permit
config access_profile profile_id 5 add access_id 36 ethernet ethernet_type 0x8864 port 12 permit
config access_profile profile_id 5 add access_id 37 ethernet ethernet_type 0x8864 port 13 permit
config access_profile profile_id 5 add access_id 38 ethernet ethernet_type 0x8864 port 14 permit
config access_profile profile_id 5 add access_id 39 ethernet ethernet_type 0x8864 port 15 permit
config access_profile profile_id 5 add access_id 40 ethernet ethernet_type 0x8864 port 16 permit
config access_profile profile_id 5 add access_id 41 ethernet ethernet_type 0x8864 port 17 permit
config access_profile profile_id 5 add access_id 42 ethernet ethernet_type 0x8864 port 18 permit
config access_profile profile_id 5 add access_id 43 ethernet ethernet_type 0x8864 port 19 permit
config access_profile profile_id 5 add access_id 44 ethernet ethernet_type 0x8864 port 20 permit
config access_profile profile_id 5 add access_id 45 ethernet ethernet_type 0x8864 port 21 permit
config access_profile profile_id 5 add access_id 46 ethernet ethernet_type 0x8864 port 22 permit
config access_profile profile_id 5 add access_id 47 ethernet ethernet_type 0x8864 port 23 permit
config access_profile profile_id 5 add access_id 48 ethernet ethernet_type 0x8864 port 24 permit

create access_profile ethernet source_mac 00-00-00-00-00-00 profile_id 6


disable cpu_interface_filtering

# SNTP

enable sntp
config time_zone operator + hour 6 min 0
config sntp primary 10.4.0.2 secondary 0.0.0.0 poll-interval 720
config dst disable

# IPBIND
config address_binding ip_mac ports 1-24 state enable
config address_binding ip_mac ports 1-24 state enable loose
enable address_binding acl_mode
enable address_binding trap_log
disable address_binding dhcp_snoop
create address_binding ip_mac ipaddress 10.32.1.1 mac_address мак-абонента ports 1 mode acl
-----
#тут еще полторы сотни таких-же привязок
-----
config address_binding dhcp_snoop max_entry ports 1 limit 5
config address_binding dhcp_snoop max_entry ports 2 limit 5
config address_binding dhcp_snoop max_entry ports 3 limit 5
config address_binding dhcp_snoop max_entry ports 4 limit 5
config address_binding dhcp_snoop max_entry ports 5 limit 5
config address_binding dhcp_snoop max_entry ports 6 limit 5
config address_binding dhcp_snoop max_entry ports 7 limit 5
config address_binding dhcp_snoop max_entry ports 8 limit 5
config address_binding dhcp_snoop max_entry ports 9 limit 5
config address_binding dhcp_snoop max_entry ports 10 limit 5
config address_binding dhcp_snoop max_entry ports 11 limit 5
config address_binding dhcp_snoop max_entry ports 12 limit 5
config address_binding dhcp_snoop max_entry ports 13 limit 5
config address_binding dhcp_snoop max_entry ports 14 limit 5
config address_binding dhcp_snoop max_entry ports 15 limit 5
config address_binding dhcp_snoop max_entry ports 16 limit 5
config address_binding dhcp_snoop max_entry ports 17 limit 5
config address_binding dhcp_snoop max_entry ports 18 limit 5
config address_binding dhcp_snoop max_entry ports 19 limit 5
config address_binding dhcp_snoop max_entry ports 20 limit 5
config address_binding dhcp_snoop max_entry ports 21 limit 5
config address_binding dhcp_snoop max_entry ports 22 limit 5
config address_binding dhcp_snoop max_entry ports 23 limit 5
config address_binding dhcp_snoop max_entry ports 24 limit 5
config address_binding dhcp_snoop max_entry ports 25 limit 5
config address_binding dhcp_snoop max_entry ports 26 limit 5