##Неправильный пароль
[dyr@home-vr ~]$ ssh dyr@10.90.90.11
dyr@10.90.90.11's password:
Permission denied, please try again.
dyr@10.90.90.11's password:
Received disconnect from 10.90.90.11: 15: Disconnected : Incorrect login parameters
###Правильный пароль
[dyr@home-vr ~]$ ssh dyr@10.90.90.11
The authenticity of host '10.90.90.11 (10.90.90.11)' can't be established.
DSA key fingerprint is 46:87:9d:4b:0e:f5:82:fc:92:12:09:11:02:9f:8b:ad.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.90.90.11' (DSA) to the list of known hosts.
dyr@10.90.90.11's password:
Read from remote host 10.90.90.11: Connection reset by peer
Connection to 10.90.90.11 closed.

DES-3528:5#
======================== CPU EXCEPTION ========================
Current Task = SSH_0 Stack Pointer = 86915C38
---------------------------CP0 Registers-----------------------
Status : F000FF03  Interrupt enable  Exception level
Cause  : 00000028  Reserved instruction exception
EPC    : 80013824        Addr   : 6F72652D
Stack  : 86915C38        Return : 80646EE8
------------------------normal registers-----------------------
at( $1) : 20000000  v0( $2) : 00000008  v1( $3) : 00000059  a0( $4) : 6F72652D
a1( $5) : 809B110C  a2( $6) : 0000001C  a3( $7) : 80B32F90  t0( $8) : 00ADEC17
t1( $9) : 00000000  t2($10) : 80B18280  t3($11) : 80B18280  t4($12) : 00000000
t5($13) : 00000000  t6($14) : 0217270E  t7($15) : 00000002  s0($16) : 0000001C
s1($17) : 6F72652D  s2($18) : 84867B5A  s3($19) : 86915CE0  s4($20) : FFFFFFFF
s5($21) : 00000040  s6($22) : 80AA0000  s7($23) : 80A03E50  t8($24) : 001AFB2A
t9($25) : F4C532F1  k0($26) : 00000028  k1($27) : 80B20E0C  gp($28) : 80B10EF0
sp($29) : 86915C38  fp($30) : 00000002  ra($31) : 80646EE8

------------------------- TASK STACKTRACE ------------------------
->7365736B
->80013824

EXCEPTION#

  Boot Procedure                                                    V1.00.B007
-------------------------------------------------------------------------------

  Power On Self Test ........................................  100 %

  MAC Address   : 00-21-91-B0-88-A0
  H/W Version   : A2

  Please wait, loading V1.03.B009 Runtime image .............  100 %
  UART init .................................................  100 %
  Device Discovery ..........................................  100 %
  Configuration init ........................................  100 %

                        DES-3528 Fast Ethernet Switch
                            Command Line Interface

                          Firmware: Build 1.03.B009
           Copyright(C) 2008 D-Link Corporation. All rights reserved.
UserName:

 Command: show config current_config

#-------------------------------------------------------------------------------
#                        DES-3528 Fast Ethernet Switch
#                                Configuration
#
#                          Firmware: Build 1.03.B009
#           Copyright(C) 2008 D-Link Corporation. All rights reserved.
#-------------------------------------------------------------------------------


# STACK


# BASIC

# ACCOUNT LIST

# ACCOUNT END
# PASSWORD ENCRYPTION
enable password encryption
config serial_port auto_logout 15_minutes
disable telnet
disable web
enable clipaging

# STORM

config traffic trap none
config traffic control  1-5 broadcast disable multicast disable unicast disable action drop threshold 128000 countdown 0 time_interval 5
config traffic control  6-28 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5

# LOOP_DETECT

enable loopdetect
config loopdetect recover_timer 60 interval 10 mode port-based
config loopdetect ports 1 state enabled
config loopdetect ports 2 state enabled
config loopdetect ports 3 state enabled
config loopdetect ports 4 state enabled
config loopdetect ports 5 state enabled
config loopdetect ports 6 state enabled
config loopdetect ports 7 state enabled
config loopdetect ports 8 state enabled
config loopdetect ports 9 state enabled
config loopdetect ports 10 state enabled
config loopdetect ports 11 state enabled
config loopdetect ports 12 state enabled
config loopdetect ports 13 state enabled
config loopdetect ports 14 state enabled
config loopdetect ports 15 state enabled
config loopdetect ports 16 state enabled
config loopdetect ports 17 state enabled
config loopdetect ports 18 state enabled
config loopdetect ports 19 state enabled
config loopdetect ports 20 state enabled
config loopdetect ports 21 state enabled
config loopdetect ports 22 state enabled
config loopdetect ports 23 state enabled
config loopdetect ports 24 state enabled
config loopdetect ports 25 state disabled
config loopdetect ports 26 state disabled
config loopdetect ports 27 state disabled
config loopdetect ports 28 state disabled

# GM

config sim commander
disable sim
config sim dp_interval 30
config sim hold_time 100
config sim commander group_name default

# GM_H


# SYSLOG

enable syslog
config system_severity log information
config system_severity trap information
create syslog host 1 severity all facility local0 udp_port 514 ipaddress 10.78.77.88 state enable
config log_save_timing on_demand

# QOS

config scheduling_mechanism strict
config scheduling 0 max_packet 1
config scheduling 1 max_packet 2
config scheduling 2 max_packet 3
config scheduling 3 max_packet 4
config scheduling 4 max_packet 5
config scheduling 5 max_packet 6
config scheduling 6 max_packet 7
config 802.1p user_priority 0  2
config 802.1p user_priority 1  0
config 802.1p user_priority 2  1
config 802.1p user_priority 3  3
config 802.1p user_priority 4  4
config 802.1p user_priority 5  5
config 802.1p user_priority 6  6
config 802.1p user_priority 7  6
enable hol_prevention
config 802.1p default_priority 1-28 0
config bandwidth_control 1-28 rx_rate no_limit tx_rate no_limit

# MIRROR

disable mirror

# TRAF-SEGMENTATION

config traffic_segmentation 1-28 forward_list all

# SSL

disable ssl
enable ssl ciphersuite RSA_with_RC4_128_MD5
enable ssl ciphersuite RSA_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite DHE_DSS_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5
config ssl cachetimeout 600

# PORT

enable jumbo_frame
config ports 1-24,27-28 speed auto flow_control disable learning enable state enable
config ports 25-26 medium_type copper speed auto flow_control disable learning enable state enable
config ports 25-26 medium_type fiber speed auto flow_control disable learning enable state enable

# PORT_LOCK

enable port_security trap_log
config port_security ports 1-24 admin_state enable max_learning_addr 8 lock_address_mode DeleteOnTimeout
config port_security ports 25-28 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnReset

# SNMPv3

delete snmp community public
delete snmp community private
delete snmp user initial
delete snmp group initial
delete snmp view restricted all
delete snmp view CommunityView all
config snmp engineID 800000ab03001e58a37aa8
create snmp view comm-view 1 view_type included
create snmp view comm-view 1.3.6.1.6.3 view_type excluded
create snmp view comm-view 1.3.6.1.6.3.1 view_type included
create snmp view restricted 1.3.6.1.2.1.1 view_type included
create snmp view restricted 1.3.6.1.2.1.11 view_type included
create snmp view restricted 1.3.6.1.6.3.10.2.1 view_type included
create snmp view restricted 1.3.6.1.6.3.11.2.1 view_type included
create snmp view restricted 1.3.6.1.6.3.15.1.1 view_type included
create snmp group ReadGroup v1 read_view CommunityView notify_view CommunityView
create snmp group ReadGroup v2c read_view CommunityView notify_view CommunityView
create snmp group XXX v1 read_view comm-view write_view comm-view notify_view comm-view
create snmp group XXX v2c read_view comm-view write_view comm-view notify_view comm-view
create snmp group XXX v1 read_view comm-view notify_view comm-view
create snmp group XXX v2c read_view comm-view notify_view comm-view
create snmp group WriteGroup v1 read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group WriteGroup v2c read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp community XXX view comm-view read_write
create snmp community XXX view comm-view read_only
create snmp host 10.78.77.88 v2c  XXX

# MANAGEMENT

enable snmp traps
enable snmp authenticate_traps
enable snmp
config snmp system_name D-Link

# VLAN

enable pvid auto_assign
config vlan default delete 1-28
config vlan default add untagged 27-28
config vlan default advertisement enable
create vlan 3051 tag 3051
config vlan 3051 add tagged 25 advertisement disable
create vlan homenet1 tag 3101
config vlan homenet1 add tagged 25-26
config vlan homenet1 add untagged 1-24 advertisement disable
disable gvrp
disable asymmetric_vlan
config port_vlan 1-24 gvrp_state disable ingress_checking enable acceptable_frame admit_all pvid 3101
config port_vlan 25-28 gvrp_state disable ingress_checking enable acceptable_frame admit_all pvid 1

# PROTOCOL_VLAN


# QINQ

disable qinq
config qinq ports 1-28  missdrop disable outer_tpid 0x8100

# MBA

disable mac_based_access_control
config mac_based_access_control ports 1-28 state disable
config mac_based_access_control method local
config mac_based_access_control password default

# 8021X

disable 802.1x
config 802.1x auth_mode port_based
config 802.1x auth_protocol radius_eap
config 802.1x fwd_pdu system disable
config 802.1x capability ports 1-28 none
config 802.1x auth_parameter ports 1-28 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable

# guestvlan


# TR


# ACL


#CPU Interface Filter

disable cpu_interface_filtering

# FDB

create fdb homenet1 00-1E-58-5E-52-01 port 25
config fdb aging_time 300

# ADDRBIND
config address_binding dhcp_snoop max_entry ports 1 limit 5
config address_binding dhcp_snoop max_entry ports 2 limit 5
config address_binding dhcp_snoop max_entry ports 3 limit 5
config address_binding dhcp_snoop max_entry ports 4 limit 5
config address_binding dhcp_snoop max_entry ports 5 limit 5
config address_binding dhcp_snoop max_entry ports 6 limit 5
config address_binding dhcp_snoop max_entry ports 7 limit 5
config address_binding dhcp_snoop max_entry ports 8 limit 5
config address_binding dhcp_snoop max_entry ports 9 limit 5
config address_binding dhcp_snoop max_entry ports 10 limit 5
config address_binding dhcp_snoop max_entry ports 11 limit 5
config address_binding dhcp_snoop max_entry ports 12 limit 5
config address_binding dhcp_snoop max_entry ports 13 limit 5
config address_binding dhcp_snoop max_entry ports 14 limit 5
config address_binding dhcp_snoop max_entry ports 15 limit 5
config address_binding dhcp_snoop max_entry ports 16 limit 5
config address_binding dhcp_snoop max_entry ports 17 limit 5
config address_binding dhcp_snoop max_entry ports 18 limit 5
config address_binding dhcp_snoop max_entry ports 19 limit 5
config address_binding dhcp_snoop max_entry ports 20 limit 5
config address_binding dhcp_snoop max_entry ports 21 limit 5
config address_binding dhcp_snoop max_entry ports 22 limit 5
config address_binding dhcp_snoop max_entry ports 23 limit 5
config address_binding dhcp_snoop max_entry ports 24 limit 5
config address_binding dhcp_snoop max_entry ports 25 limit 5
config address_binding dhcp_snoop max_entry ports 26 limit 5
config address_binding dhcp_snoop max_entry ports 27 limit 5
config address_binding dhcp_snoop max_entry ports 28 limit 5
config address_binding ip_mac ports 1-26 allow_zeroip enable
config address_binding ip_mac ports 1-28 forward_dhcppkt enable
disable address_binding dhcp_snoop

disable address_binding acl_mode
enable address_binding trap_log

# NetBiosFilter

config filter netbios all state disable
config filter netbios 1-24 state enable
config filter extensive_netbios all state disable
config filter extensive_netbios 1-24 state enable

# DhcpServerScreening

config filter dhcp_server port all state disable
config filter dhcp_server port 1-24 state enable

# sRED

disable sred
config dscp trust all state disable
config sred all  all threshold low 60 high 80 drop_rate low 1 high 1 drop_green disable
config 802.1p map all 1p_color 0-7 to green
config dscp map all dscp_color 0-63 to green
config dscp map all dscp_dscp 0 to 0
config dscp map all dscp_dscp 1 to 1
config dscp map all dscp_dscp 2 to 2
config dscp map all dscp_dscp 3 to 3
config dscp map all dscp_dscp 4 to 4
config dscp map all dscp_dscp 5 to 5
config dscp map all dscp_dscp 6 to 6
config dscp map all dscp_dscp 7 to 7
config dscp map all dscp_dscp 8 to 8
config dscp map all dscp_dscp 9 to 9
config dscp map all dscp_dscp 10 to 10
config dscp map all dscp_dscp 11 to 11
config dscp map all dscp_dscp 12 to 12
config dscp map all dscp_dscp 13 to 13
config dscp map all dscp_dscp 14 to 14
config dscp map all dscp_dscp 15 to 15
config dscp map all dscp_dscp 16 to 16
config dscp map all dscp_dscp 17 to 17
config dscp map all dscp_dscp 18 to 18
config dscp map all dscp_dscp 19 to 19
config dscp map all dscp_dscp 20 to 20
config dscp map all dscp_dscp 21 to 21
config dscp map all dscp_dscp 22 to 22
config dscp map all dscp_dscp 23 to 23
config dscp map all dscp_dscp 24 to 24
config dscp map all dscp_dscp 25 to 25
config dscp map all dscp_dscp 26 to 26
config dscp map all dscp_dscp 27 to 27
config dscp map all dscp_dscp 28 to 28
config dscp map all dscp_dscp 29 to 29
config dscp map all dscp_dscp 30 to 30
config dscp map all dscp_dscp 31 to 31
config dscp map all dscp_dscp 32 to 32
config dscp map all dscp_dscp 33 to 33
config dscp map all dscp_dscp 34 to 34
config dscp map all dscp_dscp 35 to 35
config dscp map all dscp_dscp 36 to 36
config dscp map all dscp_dscp 37 to 37
config dscp map all dscp_dscp 38 to 38
config dscp map all dscp_dscp 39 to 39
config dscp map all dscp_dscp 40 to 40
config dscp map all dscp_dscp 41 to 41
config dscp map all dscp_dscp 42 to 42
config dscp map all dscp_dscp 43 to 43
config dscp map all dscp_dscp 44 to 44
config dscp map all dscp_dscp 45 to 45
config dscp map all dscp_dscp 46 to 46
config dscp map all dscp_dscp 47 to 47
config dscp map all dscp_dscp 48 to 48
config dscp map all dscp_dscp 49 to 49
config dscp map all dscp_dscp 50 to 50
config dscp map all dscp_dscp 51 to 51
config dscp map all dscp_dscp 52 to 52
config dscp map all dscp_dscp 53 to 53
config dscp map all dscp_dscp 54 to 54
config dscp map all dscp_dscp 55 to 55
config dscp map all dscp_dscp 56 to 56
config dscp map all dscp_dscp 57 to 57
config dscp map all dscp_dscp 58 to 58
config dscp map all dscp_dscp 59 to 59
config dscp map all dscp_dscp 60 to 60
config dscp map all dscp_dscp 61 to 61
config dscp map all dscp_dscp 62 to 62
config dscp map all dscp_dscp 63 to 63
config dscp map all dscp_priority 0-7 to 0
config dscp map all dscp_priority 8-15 to 1
config dscp map all dscp_priority 16-23 to 2
config dscp map all dscp_priority 24-31 to 3
config dscp map all dscp_priority 32-39 to 4
config dscp map all dscp_priority 40-47 to 5
config dscp map all dscp_priority 48-55 to 6
config dscp map all dscp_priority 56-63 to 7

# PPPoE

config pppoe circuit_id_insertion state disable

# MAC_ADDRESS_TABLE_NOTIFICATION

enable mac_notification
config mac_notification interval 1 historysize 1
config mac_notification ports 1-24 enable
config mac_notification ports 25-28 disable

# STP

 config stp version rstp
 config stp maxage 20 maxhops 20 forwarddelay 15 txholdcount 6 fbpdu enable hellotime 2
 config stp priority 32768 instance_id 0
 config stp mst_config_id name 00:21:91:B0:88:A0 revision_level 0
 disable stp
 config stp ports 1-28 externalCost auto  edge false p2p auto state enable restricted_role false restricted_tcn false
 config stp mst_ports 1-28 instance_id 0 internalCost auto priority 128
config stp ports 1-28 fbpdu enable

# MULTI FILTER


# BPDU_PROTECTION

config bpdu_protection ports 1-28 mode drop

# SAFEGUARD_ENGINE

config safeguard_engine state disable utilization rising 30 falling 20 trap_log disable mode fuzzy

# BANNER_PROMP

config command_prompt default
config greeting_message default

# SSH

 config ssh algorithm 3DES enable
 config ssh algorithm AES128 enable
 config ssh algorithm AES192 enable
 config ssh algorithm AES256 enable
 config ssh algorithm arcfour enable
 config ssh algorithm blowfish enable
 config ssh algorithm cast128 enable
 config ssh algorithm twofish128 enable
 config ssh algorithm twofish192 enable
 config ssh algorithm twofish256 enable
 config ssh algorithm MD5 enable
 config ssh algorithm SHA1 enable
 config ssh algorithm RSA enable
 config ssh algorithm DSA enable
 config ssh authmode password enable
 config ssh authmode publickey enable
 config ssh authmode hostbased disable
 config ssh server maxsession 8
 config ssh server contimeout 300
 config ssh server authfail 2
 config ssh server rekey never
 enable ssh

# SNTP

enable sntp
config time_zone operator + hour 3 min 0
config sntp primary 10.78.77.88 secondary 0.0.0.0 poll-interval 720
config dst annual s_date 29 s_mth 4 s_time 0:0 e_date 12 e_mth 10 e_time 0:0 offset 60
config dst repeating s_week 1 s_day sun s_mth 4 s_time 0:0 e_week last e_day sun e_mth 10 e_time 0:0 offset 60

# LACP

config link_aggregation algorithm mac_source
config lacp_port 1-28 mode passive

# IP

config ipif System ipaddress 10.90.90.11/23 vlan 3051
disable autoconfig

# JWAC

config jwac switch_http_port 80
config jwac clear_quarantine_server_url
config jwac radius_protocol pap
disable jwac quarantine_server_monitor
config jwac quarantine_server_error_timeout 30
enable jwac forcible_logout
enable jwac udp_filtering
enable jwac redirect
config jwac redirect destination quarantine_server delay_time 1
disable jwac
config jwac ports 1-28 max_authenticating_host 50 aging_time 1440 idle_time infinite block_time 0

# LLDP

disable lldp
config lldp message_tx_interval 30
config lldp tx_delay 2
config lldp message_tx_hold_multiplier 4
config lldp reinit_delay 2
config lldp notification_interval 5
config lldp ports 1-28 notification disable
config lldp ports 1-28 admin_status tx_and_rx

# MULTICAST_VLAN


# MCFILTER


# SNOOP


# MLDSNP


# ACCESS_AUTHENTICATION_CONTROL

config authen_login default method local
config authen_enable default method  local_enable
config authen application console login default
config authen application console enable default
config authen application telnet login default
config authen application telnet enable default
config authen application ssh login default
config authen application ssh enable default
config authen application http login default
config authen application http enable default
config authen parameter response_timeout 30
config authen parameter attempt 3
disable authen_policy
config accounting service network state disable
config accounting service shell state disable
config accounting service system state disable

# DHCP_LOCAL_RELAY

disable dhcp_local_relay

# AAA_LOCAL_ENABLE_PASSWORD

# AAA ADMIN PWD LIST

# DHCP_RELAY

enable dhcp_relay
config dhcp_relay hops 4 time 0
config dhcp_relay option_82 state enable
config dhcp_relay option_82 check enable
config dhcp_relay option_82 policy replace
config dhcp_relay add ipif System 10.78.77.88

# WAC

 config wac method local
 config wac logout_timer 60
 disable wac

# ARP

config arp_aging time 20

# ROUTE

create iproute default 10.90.90.1 1

# DHCP_S

 config dhcp ping_packets 2
 config dhcp ping_timeout 500
 disable dhcp_server

#-------------------------------------------------------------------
#             End of configuration file for DES-3528
#-------------------------------------------------------------------

DES-3528:5#

                        DES-3528 Fast Ethernet Switch
                            Command Line Interface

                          Firmware: Build 1.03.B011
           Copyright(C) 2008 D-Link Corporation. All rights reserved.
UserName:
PassWord:
Fail!
UserName:dyr
PassWord:******

DES-3528:5#

 
======================== CPU EXCEPTION ========================
Current Task = SSH_0 Stack Pointer = 86915F18
---------------------------CP0 Registers-----------------------
Status : F000FF03  Interrupt enable  Exception level
Cause  : 00000028  Reserved instruction exception
EPC    : 80013824        Addr   : 6F72652D
Stack  : 86915F18        Return : 80646F74
------------------------normal registers-----------------------
at( $1) : 20000000  v0( $2) : 00000008  v1( $3) : 00000059  a0( $4) : 6F72652D
a1( $5) : 809B12D4  a2( $6) : 0000001C  a3( $7) : 80B33290  t0( $8) : 00EB6EDD
t1( $9) : 00000000  t2($10) : 80B18580  t3($11) : 80B18580  t4($12) : 00000000
t5($13) : 00000000  t6($14) : 0217DA56  t7($15) : 00000002  s0($16) : 0000001C
s1($17) : 6F72652D  s2($18) : 84868592  s3($19) : 86915FC0  s4($20) : FFFFFFFF
s5($21) : 00000040  s6($22) : 80AA0000  s7($23) : 80A04098  t8($24) : 9CE1A3BA
t9($25) : 07A07258  k0($26) : 00000028  k1($27) : 80B2110C  gp($28) : 80B111F0
sp($29) : 86915F18  fp($30) : 00000002  ra($31) : 80646F74

------------------------- TASK STACKTRACE ------------------------
->7365736B
->80013824

EXCEPTION#

  Boot Procedure                                                    V1.00.B007
-------------------------------------------------------------------------------

  Power On Self Test ........................................  100 %

  MAC Address   : 00-21-91-B0-88-A0
  H/W Version   : A2

  Please wait, loading V1.03.B011 Runtime image .............  100 %
  UART init .................................................  100 %
  Device Discovery ..........................................  100 %
  Configuration init ........................................  100 %

                        DES-3528 Fast Ethernet Switch
                            Command Line Interface

                          Firmware: Build 1.03.B011
           Copyright(C) 2008 D-Link Corporation. All rights reserved.
UserName:
PassWord:

DES-3528:5#enable password encryption
Command: enable password encryption

Success.

DES-3528:5#create account admin dyr
Command: create account admin dyr

Enter a case-sensitive new password:******
Enter the new password again for confirmation:******
Success.

DES-3528:5#show account
Command: show account

 Current Accounts:
 Username             Access Level
 ---------------      ------------
 dyr                  Admin

 Total Entries : 1

DES-3528:5#create account admin admin
Command: create account admin admin

Enter a case-sensitive new password:***
Enter the new password again for confirmation:***
Success.

DES-3528:5#disable asymmetric_vlan
Command: disable asymmetric_vlan

Success.

DES-3528:5#config vlan default delete 1-26
Command: config vlan default delete 1-26

Success.

DES-3528:5#config vlan default advertisement enable
Command: config vlan default advertisement enable

Success.

DES-3528:5#create vlan 3051 tag 3051
Command: create vlan 3051 tag 3051

Success.

DES-3528:5#config vlan 3051 add tagged 25
Command: config vlan 3051 add tagged 25

Success.

DES-3528:5#config vlan 3051 advertisement disable
Command: config vlan 3051 advertisement disable

Success.

DES-3528:5#create vlan homenet1 tag 3101
Command: create vlan homenet1 tag 3101

Success.

DES-3528:5#config vlan homenet1 add tagged 25-26
Command: config vlan homenet1 add tagged 25-26

Success.

DES-3528:5#config vlan homenet1 add untagged 1-24
Command: config vlan homenet1 add untagged 1-24

Success.

DES-3528:5#config vlan homenet1 advertisement disable
Command: config vlan homenet1 advertisement disable

Success.

DES-3528:5#disable gvrp
Command: disable gvrp

Success.

DES-3528:5#config ipif System vlan 3051 ipaddress 10.90.90.90/23 state enable
Command: config ipif System vlan 3051 ipaddress 10.90.90.90/23 state enable

Success.

DES-3528:5#create iproute default 10.90.90.1 1
Command: create iproute default 10.90.90.1 1

Success.

DES-3528:5#enable ssh
Command: enable ssh

TELNET will be disabled when enable SSH.
Success.

DES-3528:5#save
Command: save

Saving all configurations to NV-RAM.......... Done.

DES-3528:5#

DES-3528:5#show config current_config
Command: show config current_config

#-------------------------------------------------------------------------------
#                        DES-3528 Fast Ethernet Switch
#                                Configuration
#
#                          Firmware: Build 1.03.B011
#           Copyright(C) 2008 D-Link Corporation. All rights reserved.
#-------------------------------------------------------------------------------


# STACK


# BASIC

# ACCOUNT LIST


# ACCOUNT END
# PASSWORD ENCRYPTION
enable password encryption
config serial_port auto_logout 10_minutes
disable telnet
enable web 80
enable clipaging

# STORM

config traffic trap none
config traffic control  1-28 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5

# LOOP_DETECT

disable loopdetect
config loopdetect recover_timer 60 interval 10 mode port-based
config loopdetect ports 1 state disabled
config loopdetect ports 2 state disabled
config loopdetect ports 3 state disabled
config loopdetect ports 4 state disabled
config loopdetect ports 5 state disabled
config loopdetect ports 6 state disabled
config loopdetect ports 7 state disabled
config loopdetect ports 8 state disabled
config loopdetect ports 9 state disabled
config loopdetect ports 10 state disabled
config loopdetect ports 11 state disabled
config loopdetect ports 12 state disabled
config loopdetect ports 13 state disabled
config loopdetect ports 14 state disabled
config loopdetect ports 15 state disabled
config loopdetect ports 16 state disabled
config loopdetect ports 17 state disabled
config loopdetect ports 18 state disabled
config loopdetect ports 19 state disabled
config loopdetect ports 20 state disabled
config loopdetect ports 21 state disabled
config loopdetect ports 22 state disabled
config loopdetect ports 23 state disabled
config loopdetect ports 24 state disabled
config loopdetect ports 25 state disabled
config loopdetect ports 26 state disabled
config loopdetect ports 27 state disabled
config loopdetect ports 28 state disabled

# GM

config sim candidate
disable sim
config sim dp_interval 30
config sim hold_time 100

# GM_H


# SYSLOG

disable syslog
config system_severity log information
config system_severity trap information
config log_save_timing on_demand

# QOS

config scheduling_mechanism strict
config scheduling 0 max_packet 1
config scheduling 1 max_packet 2
config scheduling 2 max_packet 3
config scheduling 3 max_packet 4
config scheduling 4 max_packet 5
config scheduling 5 max_packet 6
config scheduling 6 max_packet 7
config 802.1p user_priority 0  2
config 802.1p user_priority 1  0
config 802.1p user_priority 2  1
config 802.1p user_priority 3  3
config 802.1p user_priority 4  4
config 802.1p user_priority 5  5
config 802.1p user_priority 6  6
config 802.1p user_priority 7  6
enable hol_prevention
config 802.1p default_priority 1-28 0
config bandwidth_control 1-28 rx_rate no_limit tx_rate no_limit

# MIRROR

disable mirror

# TRAF-SEGMENTATION

config traffic_segmentation 1-28 forward_list all

# SSL

disable ssl
enable ssl ciphersuite RSA_with_RC4_128_MD5
enable ssl ciphersuite RSA_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite DHE_DSS_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5
config ssl cachetimeout 600

# PORT

disable jumbo_frame
config ports 1-24,27-28 speed auto flow_control disable learning enable state enable
config ports 25-26 medium_type copper speed auto flow_control disable learning enable state enable
config ports 25-26 medium_type fiber speed auto flow_control disable learning enable state enable

# PORT_LOCK

disable port_security trap_log
config port_security ports 1-28 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnReset

# SNMPv3

delete snmp community public
delete snmp community private
delete snmp user initial
delete snmp group initial
delete snmp view restricted all
delete snmp view CommunityView all
config snmp engineID 800000ab03002191b088a0
create snmp view restricted 1.3.6.1.2.1.1 view_type included
create snmp view restricted 1.3.6.1.2.1.11 view_type included
create snmp view restricted 1.3.6.1.6.3.10.2.1 view_type included
create snmp view restricted 1.3.6.1.6.3.11.2.1 view_type included
create snmp view restricted 1.3.6.1.6.3.15.1.1 view_type included
create snmp view CommunityView 1 view_type included
create snmp view CommunityView 1.3.6.1.6.3 view_type excluded
create snmp view CommunityView 1.3.6.1.6.3.1 view_type included
create snmp group public v1 read_view CommunityView notify_view CommunityView
create snmp group public v2c read_view CommunityView notify_view CommunityView
create snmp group initial v3  noauth_nopriv read_view restricted notify_view restricted
create snmp group private v1 read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group private v2c read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group ReadGroup v1 read_view CommunityView notify_view CommunityView
create snmp group ReadGroup v2c read_view CommunityView notify_view CommunityView
create snmp group WriteGroup v1 read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group WriteGroup v2c read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp community private view CommunityView read_write
create snmp community public view CommunityView read_only
create snmp user initial initial

# MANAGEMENT

enable snmp traps
enable snmp authenticate_traps
disable snmp

# VLAN

enable pvid auto_assign
config vlan default delete 1-28
config vlan default add untagged 27-28
config vlan default advertisement enable
create vlan 3051 tag 3051
config vlan 3051 add tagged 25 advertisement disable
create vlan homenet1 tag 3101
config vlan homenet1 add tagged 25-26
config vlan homenet1 add untagged 1-24 advertisement disable
disable gvrp
disable asymmetric_vlan
config port_vlan 1-24 gvrp_state disable ingress_checking enable acceptable_frame admit_all pvid 3101
config port_vlan 25-28 gvrp_state disable ingress_checking enable acceptable_frame admit_all pvid 1

# PROTOCOL_VLAN


# QINQ

disable qinq
config qinq ports 1-28  missdrop disable outer_tpid 0x8100

# MBA

disable mac_based_access_control
config mac_based_access_control ports 1-28 state disable
config mac_based_access_control method local
config mac_based_access_control password default

# 8021X

disable 802.1x
config 802.1x auth_mode port_based
config 802.1x auth_protocol radius_eap
config 802.1x fwd_pdu system disable
config 802.1x capability ports 1-28 none
config 802.1x auth_parameter ports 1-28 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable

# guestvlan


# TR


# ACL


#CPU Interface Filter

disable cpu_interface_filtering

# FDB

config fdb aging_time 300

# ADDRBIND
config address_binding dhcp_snoop max_entry ports 1 limit 5
config address_binding dhcp_snoop max_entry ports 2 limit 5
config address_binding dhcp_snoop max_entry ports 3 limit 5
config address_binding dhcp_snoop max_entry ports 4 limit 5
config address_binding dhcp_snoop max_entry ports 5 limit 5
config address_binding dhcp_snoop max_entry ports 6 limit 5
config address_binding dhcp_snoop max_entry ports 7 limit 5
config address_binding dhcp_snoop max_entry ports 8 limit 5
config address_binding dhcp_snoop max_entry ports 9 limit 5
config address_binding dhcp_snoop max_entry ports 10 limit 5
config address_binding dhcp_snoop max_entry ports 11 limit 5
config address_binding dhcp_snoop max_entry ports 12 limit 5
config address_binding dhcp_snoop max_entry ports 13 limit 5
config address_binding dhcp_snoop max_entry ports 14 limit 5
config address_binding dhcp_snoop max_entry ports 15 limit 5
config address_binding dhcp_snoop max_entry ports 16 limit 5
config address_binding dhcp_snoop max_entry ports 17 limit 5
config address_binding dhcp_snoop max_entry ports 18 limit 5
config address_binding dhcp_snoop max_entry ports 19 limit 5
config address_binding dhcp_snoop max_entry ports 20 limit 5
config address_binding dhcp_snoop max_entry ports 21 limit 5
config address_binding dhcp_snoop max_entry ports 22 limit 5
config address_binding dhcp_snoop max_entry ports 23 limit 5
config address_binding dhcp_snoop max_entry ports 24 limit 5
config address_binding dhcp_snoop max_entry ports 25 limit 5
config address_binding dhcp_snoop max_entry ports 26 limit 5
config address_binding dhcp_snoop max_entry ports 27 limit 5
config address_binding dhcp_snoop max_entry ports 28 limit 5
config address_binding ip_mac ports 1-28 forward_dhcppkt enable
disable address_binding dhcp_snoop

disable address_binding acl_mode
disable address_binding trap_log

# NetBiosFilter

config filter netbios all state disable
config filter extensive_netbios all state disable

# DhcpServerScreening

config filter dhcp_server port all state disable

# sRED

disable sred
config dscp trust all state disable
config sred all  all threshold low 60 high 80 drop_rate low 1 high 1 drop_green disable
config 802.1p map all 1p_color 0-7 to green
config dscp map all dscp_color 0-63 to green
config dscp map all dscp_dscp 0 to 0
config dscp map all dscp_dscp 1 to 1
config dscp map all dscp_dscp 2 to 2
config dscp map all dscp_dscp 3 to 3
config dscp map all dscp_dscp 4 to 4
config dscp map all dscp_dscp 5 to 5
config dscp map all dscp_dscp 6 to 6
config dscp map all dscp_dscp 7 to 7
config dscp map all dscp_dscp 8 to 8
config dscp map all dscp_dscp 9 to 9
config dscp map all dscp_dscp 10 to 10
config dscp map all dscp_dscp 11 to 11
config dscp map all dscp_dscp 12 to 12
config dscp map all dscp_dscp 13 to 13
config dscp map all dscp_dscp 14 to 14
config dscp map all dscp_dscp 15 to 15
config dscp map all dscp_dscp 16 to 16
config dscp map all dscp_dscp 17 to 17
config dscp map all dscp_dscp 18 to 18
config dscp map all dscp_dscp 19 to 19
config dscp map all dscp_dscp 20 to 20
config dscp map all dscp_dscp 21 to 21
config dscp map all dscp_dscp 22 to 22
config dscp map all dscp_dscp 23 to 23
config dscp map all dscp_dscp 24 to 24
config dscp map all dscp_dscp 25 to 25
config dscp map all dscp_dscp 26 to 26
config dscp map all dscp_dscp 27 to 27
config dscp map all dscp_dscp 28 to 28
config dscp map all dscp_dscp 29 to 29
config dscp map all dscp_dscp 30 to 30
config dscp map all dscp_dscp 31 to 31
config dscp map all dscp_dscp 32 to 32
config dscp map all dscp_dscp 33 to 33
config dscp map all dscp_dscp 34 to 34
config dscp map all dscp_dscp 35 to 35
config dscp map all dscp_dscp 36 to 36
config dscp map all dscp_dscp 37 to 37
config dscp map all dscp_dscp 38 to 38
config dscp map all dscp_dscp 39 to 39
config dscp map all dscp_dscp 40 to 40
config dscp map all dscp_dscp 41 to 41
config dscp map all dscp_dscp 42 to 42
config dscp map all dscp_dscp 43 to 43
config dscp map all dscp_dscp 44 to 44
config dscp map all dscp_dscp 45 to 45
config dscp map all dscp_dscp 46 to 46
config dscp map all dscp_dscp 47 to 47
config dscp map all dscp_dscp 48 to 48
config dscp map all dscp_dscp 49 to 49
config dscp map all dscp_dscp 50 to 50
config dscp map all dscp_dscp 51 to 51
config dscp map all dscp_dscp 52 to 52
config dscp map all dscp_dscp 53 to 53
config dscp map all dscp_dscp 54 to 54
config dscp map all dscp_dscp 55 to 55
config dscp map all dscp_dscp 56 to 56
config dscp map all dscp_dscp 57 to 57
config dscp map all dscp_dscp 58 to 58
config dscp map all dscp_dscp 59 to 59
config dscp map all dscp_dscp 60 to 60
config dscp map all dscp_dscp 61 to 61
config dscp map all dscp_dscp 62 to 62
config dscp map all dscp_dscp 63 to 63
config dscp map all dscp_priority 0-7 to 0
config dscp map all dscp_priority 8-15 to 1
config dscp map all dscp_priority 16-23 to 2
config dscp map all dscp_priority 24-31 to 3
config dscp map all dscp_priority 32-39 to 4
config dscp map all dscp_priority 40-47 to 5
config dscp map all dscp_priority 48-55 to 6
config dscp map all dscp_priority 56-63 to 7

# PPPoE

config pppoe circuit_id_insertion state disable

# MAC_ADDRESS_TABLE_NOTIFICATION

disable mac_notification
config mac_notification interval 1 historysize 1
config mac_notification ports 1-28 disable

# STP

 config stp version rstp
 config stp maxage 20 maxhops 20 forwarddelay 15 txholdcount 6 fbpdu disable hellotime 2
 config stp priority 32768 instance_id 0
 config stp mst_config_id name 00:21:91:B0:88:A0 revision_level 0
 disable stp
 config stp ports 1-28 externalCost auto  edge false p2p auto state enable restricted_role false restricted_tcn false
 config stp mst_ports 1-28 instance_id 0 internalCost auto priority 128
config stp ports 1-28 fbpdu disable

# MULTI FILTER


# BPDU_PROTECTION

config bpdu_protection ports 1-28 mode drop

# SAFEGUARD_ENGINE

config safeguard_engine state disable utilization rising 30 falling 20 trap_log disable mode fuzzy

# BANNER_PROMP

config command_prompt default
config greeting_message default

# SSH

 config ssh algorithm 3DES enable
 config ssh algorithm AES128 enable
 config ssh algorithm AES192 enable
 config ssh algorithm AES256 enable
 config ssh algorithm arcfour enable
 config ssh algorithm blowfish enable
 config ssh algorithm cast128 enable
 config ssh algorithm twofish128 enable
 config ssh algorithm twofish192 enable
 config ssh algorithm twofish256 enable
 config ssh algorithm MD5 enable
 config ssh algorithm SHA1 enable
 config ssh algorithm RSA enable
 config ssh algorithm DSA enable
 config ssh authmode password enable
 config ssh authmode publickey enable
 config ssh authmode hostbased enable
 config ssh server maxsession 8
 config ssh server contimeout 120
 config ssh server authfail 2
 config ssh server rekey never
 enable ssh

# SNTP

disable sntp
config time_zone operator + hour 0 min 0
config sntp primary 0.0.0.0 secondary 0.0.0.0 poll-interval 720
config dst disable

# LACP

config link_aggregation algorithm mac_source
config lacp_port 1-28 mode passive

# IP

config ipif System ipaddress 10.90.90.90/23 vlan 3051
disable autoconfig

# JWAC

config jwac switch_http_port 80
config jwac clear_quarantine_server_url
config jwac radius_protocol pap
disable jwac quarantine_server_monitor
config jwac quarantine_server_error_timeout 30
enable jwac forcible_logout
enable jwac udp_filtering
enable jwac redirect
config jwac redirect destination quarantine_server delay_time 1
disable jwac
config jwac ports 1-28 max_authenticating_host 50 aging_time 1440 idle_time infinite block_time 0

# LLDP

disable lldp
config lldp message_tx_interval 30
config lldp tx_delay 2
config lldp message_tx_hold_multiplier 4
config lldp reinit_delay 2
config lldp notification_interval 5
config lldp ports 1-28 notification disable
config lldp ports 1-28 admin_status tx_and_rx

# MULTICAST_VLAN


# MCFILTER


# SNOOP


# MLDSNP


# ACCESS_AUTHENTICATION_CONTROL

config authen_login default method local
config authen_enable default method  local_enable
config authen application console login default
config authen application console enable default
config authen application telnet login default
config authen application telnet enable default
config authen application ssh login default
config authen application ssh enable default
config authen application http login default
config authen application http enable default
config authen parameter response_timeout 30
config authen parameter attempt 3
disable authen_policy
config accounting service network state disable
config accounting service shell state disable
config accounting service system state disable

# DHCP_LOCAL_RELAY

disable dhcp_local_relay

# AAA_LOCAL_ENABLE_PASSWORD

# AAA ADMIN PWD LIST

# DHCP_RELAY

disable dhcp_relay
config dhcp_relay hops 4 time 0
config dhcp_relay option_82 state disable
config dhcp_relay option_82 check disable
config dhcp_relay option_82 policy replace

# WAC

 config wac method local
 config wac logout_timer 60
 disable wac

# ARP

config arp_aging time 20

# ROUTE

create iproute default 10.90.90.1 1

# DHCP_S

 config dhcp ping_packets 2
 config dhcp ping_timeout 500
 disable dhcp_server

#-------------------------------------------------------------------
#             End of configuration file for DES-3528
#-------------------------------------------------------------------