config multicast port_filtering_mode all filter_unregistered_groups
config multicast port_filtering_mode 28 forward_unregistered_groups
create mcast_filter_profile profile_id 1 profile_name IPTV
config mcast_filter_profile profile_id 1 add 238.1.1.0-238.1.1.255
config limited_multicast_addr ports 1-27 add profile_id 1
enable igmp_snooping forward_mcrouter_only
config igmp_snooping vlan_name default leave_timer 1 state enable
config igmp_snooping querier all state enable
config router_ports default add 28
config router_ports_forbidden default add 1-27

config igmp_snooping all state disable
config igmp_snooping all state enable

DES-3028:4#show igmp_snooping group     
Command: show igmp_snooping group
...
VLAN Name      : default
 Multicast Group: 239.255.0.95         
 MAC Address    : 01-00-5E-7F-00-5F   
 Reports        : 1
 Member Ports   : 2     
...

DES-3028:4#show igmp_snooping group     
Command: show igmp_snooping group
...
 VLAN Name      : default
 Multicast Group: 239.255.0.95         
 MAC Address    : 01-00-5E-7F-00-5F   
 Reports        : 9
 Member Ports   : 2     
...

DES-3028:4#show config current_config
Command: show config current_config

#-------------------------------------------------------------------
#                       DES-3028 Configuration
#
#                       Firmware: Build 2.10.B09
#        Copyright(C) 2008 D-Link Corporation. All rights reserved.
#-------------------------------------------------------------------


# BASIC

config serial_port baud_rate 9600 auto_logout 10_minutes
# ACCOUNT LIST

create account admin ***
***
***

# ACCOUNT END

# PASSWORD ENCRYPTION
enable password encryption
config terminal_line default
enable clipaging                                                               

# STORM

config traffic control  1 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  2 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  3 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  4 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  5 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  6 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  7 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  8 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  9 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  10 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  11 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  12 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  13 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  14 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  15 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  16 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  17 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  18 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  19 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  20 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  21 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  22 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  23 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  24 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  25 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  26 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  27 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic control  28 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5
config traffic trap none

# LOOP_DETECT

enable loopdetect
config loopdetect recover_timer 60                                             
config loopdetect interval 1
config loopdetect port 1 state enabled
config loopdetect port 2 state enabled
config loopdetect port 3 state enabled
config loopdetect port 4 state enabled
config loopdetect port 5 state enabled
config loopdetect port 6 state enabled
config loopdetect port 7 state enabled
config loopdetect port 8 state enabled
config loopdetect port 9 state enabled
config loopdetect port 10 state enabled
config loopdetect port 11 state enabled
config loopdetect port 12 state enabled
config loopdetect port 13 state enabled
config loopdetect port 14 state enabled
config loopdetect port 15 state enabled
config loopdetect port 16 state enabled
config loopdetect port 17 state enabled
config loopdetect port 18 state enabled
config loopdetect port 19 state enabled
config loopdetect port 20 state enabled
config loopdetect port 21 state enabled                                       
config loopdetect port 22 state enabled
config loopdetect port 23 state enabled
config loopdetect port 24 state enabled
config loopdetect port 25 state enabled
config loopdetect port 26 state disabled
config loopdetect port 27 state enabled
config loopdetect port 28 state enabled

# QOS

config scheduling_mechanism strict
config scheduling 0 weight 1
config scheduling 1 weight 2
config scheduling 2 weight 4
config scheduling 3 weight 8
config 802.1p user_priority 0  1
config 802.1p user_priority 1  0
config 802.1p user_priority 2  0
config 802.1p user_priority 3  1
config 802.1p user_priority 4  2
config 802.1p user_priority 5  2
config 802.1p user_priority 6  3                                               
config 802.1p user_priority 7  3
config 802.1p default_priority 1 0
config 802.1p default_priority 2 0
config 802.1p default_priority 3 0
config 802.1p default_priority 4 0
config 802.1p default_priority 5 0
config 802.1p default_priority 6 0
config 802.1p default_priority 7 0
config 802.1p default_priority 8 0
config 802.1p default_priority 9 0
config 802.1p default_priority 10 0
config 802.1p default_priority 11 0
config 802.1p default_priority 12 0
config 802.1p default_priority 13 0
config 802.1p default_priority 14 0
config 802.1p default_priority 15 0
config 802.1p default_priority 16 0
config 802.1p default_priority 17 0
config 802.1p default_priority 18 0
config 802.1p default_priority 19 0
config 802.1p default_priority 20 0
config 802.1p default_priority 21 0                                           
config 802.1p default_priority 22 0
config 802.1p default_priority 23 0
config 802.1p default_priority 24 0
config 802.1p default_priority 25 0
config 802.1p default_priority 26 0
config 802.1p default_priority 27 0
config 802.1p default_priority 28 0
config cos mapping  port 1 ethernet 802.1p
config cos mapping  port 2 ethernet 802.1p
config cos mapping  port 3 ethernet 802.1p
config cos mapping  port 4 ethernet 802.1p
config cos mapping  port 5 ethernet 802.1p
config cos mapping  port 6 ethernet 802.1p
config cos mapping  port 7 ethernet 802.1p
config cos mapping  port 8 ethernet 802.1p
config cos mapping  port 9 ethernet 802.1p
config cos mapping  port 10 ethernet 802.1p
config cos mapping  port 11 ethernet 802.1p
config cos mapping  port 12 ethernet 802.1p
config cos mapping  port 13 ethernet 802.1p
config cos mapping  port 14 ethernet 802.1p
config cos mapping  port 15 ethernet 802.1p                                   
config cos mapping  port 16 ethernet 802.1p
config cos mapping  port 17 ethernet 802.1p
config cos mapping  port 18 ethernet 802.1p
config cos mapping  port 19 ethernet 802.1p
config cos mapping  port 20 ethernet 802.1p
config cos mapping  port 21 ethernet 802.1p
config cos mapping  port 22 ethernet 802.1p
config cos mapping  port 23 ethernet 802.1p
config cos mapping  port 24 ethernet 802.1p
config cos mapping  port 25 ethernet 802.1p
config cos mapping  port 26 ethernet 802.1p
config cos mapping  port 27 ethernet 802.1p
config cos mapping  port 28 ethernet 802.1p
config cos tos value 0 class 0
config cos tos value 1 class 0
config cos tos value 2 class 0
config cos tos value 3 class 0
config cos tos value 4 class 0
config cos tos value 5 class 0
config cos tos value 6 class 0
config cos tos value 7 class 0
config dscp_mapping dscp_value 0 class 0                                       
config dscp_mapping dscp_value 1 class 0
config dscp_mapping dscp_value 2 class 0
config dscp_mapping dscp_value 3 class 0
config dscp_mapping dscp_value 4 class 0
config dscp_mapping dscp_value 5 class 0
config dscp_mapping dscp_value 6 class 0
config dscp_mapping dscp_value 7 class 0
config dscp_mapping dscp_value 8 class 0
config dscp_mapping dscp_value 9 class 0
config dscp_mapping dscp_value 10 class 0
config dscp_mapping dscp_value 11 class 0
config dscp_mapping dscp_value 12 class 0
config dscp_mapping dscp_value 13 class 0
config dscp_mapping dscp_value 14 class 0
config dscp_mapping dscp_value 15 class 0
config dscp_mapping dscp_value 16 class 0
config dscp_mapping dscp_value 17 class 0
config dscp_mapping dscp_value 18 class 0
config dscp_mapping dscp_value 19 class 0
config dscp_mapping dscp_value 20 class 0
config dscp_mapping dscp_value 21 class 0
config dscp_mapping dscp_value 22 class 0                                     
config dscp_mapping dscp_value 23 class 0
config dscp_mapping dscp_value 24 class 0
config dscp_mapping dscp_value 25 class 0
config dscp_mapping dscp_value 26 class 0
config dscp_mapping dscp_value 27 class 0
config dscp_mapping dscp_value 28 class 0
config dscp_mapping dscp_value 29 class 0
config dscp_mapping dscp_value 30 class 0
config dscp_mapping dscp_value 31 class 0
config dscp_mapping dscp_value 32 class 0
config dscp_mapping dscp_value 33 class 0
config dscp_mapping dscp_value 34 class 0
config dscp_mapping dscp_value 35 class 0
config dscp_mapping dscp_value 36 class 0
config dscp_mapping dscp_value 37 class 0
config dscp_mapping dscp_value 38 class 0
config dscp_mapping dscp_value 39 class 0
config dscp_mapping dscp_value 40 class 0
config dscp_mapping dscp_value 41 class 0
config dscp_mapping dscp_value 42 class 0
config dscp_mapping dscp_value 43 class 0
config dscp_mapping dscp_value 44 class 0                                     
config dscp_mapping dscp_value 45 class 0
config dscp_mapping dscp_value 46 class 0
config dscp_mapping dscp_value 47 class 0
config dscp_mapping dscp_value 48 class 0
config dscp_mapping dscp_value 49 class 0
config dscp_mapping dscp_value 50 class 0
config dscp_mapping dscp_value 51 class 0
config dscp_mapping dscp_value 52 class 0
config dscp_mapping dscp_value 53 class 0
config dscp_mapping dscp_value 54 class 0
config dscp_mapping dscp_value 55 class 0
config dscp_mapping dscp_value 56 class 0
config dscp_mapping dscp_value 57 class 0
config dscp_mapping dscp_value 58 class 0
config dscp_mapping dscp_value 59 class 0
config dscp_mapping dscp_value 60 class 0
config dscp_mapping dscp_value 61 class 0
config dscp_mapping dscp_value 62 class 0
config dscp_mapping dscp_value 63 class 0

# MIRROR
                                                                               
disable mirror

# BANDWIDTH

config bandwidth_control 1  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 2  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 3  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 4  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 5  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 6  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 7  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 8  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 9  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 10  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 11  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 12  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 13  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 14  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 15  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 16  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 17  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 18  rx_rate no_limit  tx_rate no_limit               
config bandwidth_control 19  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 20  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 21  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 22  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 23  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 24  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 25  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 26  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 27  rx_rate no_limit  tx_rate no_limit
config bandwidth_control 28  rx_rate no_limit  tx_rate no_limit

# SYSLOG

enable syslog
create syslog host 1 severity warning facility local0 udp_port 514 ipaddress *** state enable
create syslog host 2 severity warning facility local0 udp_port 514 ipaddress *** state enable
config log_save_timing on_demand

# TRAF-SEGMENTATION
                                                                               
config traffic_segmentation 1 forward_list 1-28
config traffic_segmentation 2 forward_list 1-28
config traffic_segmentation 3 forward_list 1-28
config traffic_segmentation 4 forward_list 1-28
config traffic_segmentation 5 forward_list 1-28
config traffic_segmentation 6 forward_list 1-28
config traffic_segmentation 7 forward_list 1-28
config traffic_segmentation 8 forward_list 1-28
config traffic_segmentation 9 forward_list 1-28
config traffic_segmentation 10 forward_list 1-28
config traffic_segmentation 11 forward_list 1-28
config traffic_segmentation 12 forward_list 1-28
config traffic_segmentation 13 forward_list 1-28
config traffic_segmentation 14 forward_list 1-28
config traffic_segmentation 15 forward_list 1-28
config traffic_segmentation 16 forward_list 1-28
config traffic_segmentation 17 forward_list 1-28
config traffic_segmentation 18 forward_list 1-28
config traffic_segmentation 19 forward_list 1-28
config traffic_segmentation 20 forward_list 1-28
config traffic_segmentation 21 forward_list 1-28
config traffic_segmentation 22 forward_list 1-28                               
config traffic_segmentation 23 forward_list 1-28
config traffic_segmentation 24 forward_list 1-28
config traffic_segmentation 25 forward_list 1-28
config traffic_segmentation 26 forward_list 1-28
config traffic_segmentation 27 forward_list 1-28
config traffic_segmentation 28 forward_list 1-28

# SSL

disable ssl
enable ssl ciphersuite RSA_with_RC4_128_MD5
enable ssl ciphersuite RSA_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite DHE_DSS_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5
config ssl cachetimeout 600

# PORT

config ports 1  speed auto flow_control disable state enable  clear_description
config ports 1  learning enable
config ports 1  mdix auto
config ports 2  speed auto flow_control disable state enable  clear_description
config ports 2  learning enable
config ports 2  mdix auto
config ports 3  speed auto flow_control disable state enable  clear_description
config ports 3  learning enable
config ports 3  mdix auto
config ports 4  speed auto flow_control disable state enable  clear_description
config ports 4  learning enable
config ports 4  mdix auto
config ports 5  speed auto flow_control disable state enable  clear_description
config ports 5  learning enable
config ports 5  mdix auto
config ports 6  speed auto flow_control disable state enable  clear_description
config ports 6  learning enable
config ports 6  mdix auto
config ports 7  speed auto flow_control disable state enable  clear_description
config ports 7  learning enable
config ports 7  mdix auto
config ports 8  speed auto flow_control disable state enable  clear_description
config ports 8  learning enable
config ports 8  mdix auto
config ports 9  speed auto flow_control disable state enable  clear_description
config ports 9  learning enable                                               
config ports 9  mdix auto
config ports 10  speed auto flow_control disable state enable  clear_description
config ports 10  learning enable
config ports 10  mdix auto
config ports 11  speed auto flow_control disable state enable  clear_description
config ports 11  learning enable
config ports 11  mdix auto
config ports 12  speed auto flow_control disable state enable  clear_description
config ports 12  learning enable
config ports 12  mdix auto
config ports 13  speed auto flow_control disable state enable  clear_description
config ports 13  learning enable
config ports 13  mdix auto
config ports 14  speed auto flow_control disable state enable  clear_description
config ports 14  learning enable
config ports 14  mdix auto
config ports 15  speed auto flow_control disable state enable  clear_description
config ports 15  learning enable
config ports 15  mdix auto
config ports 16  speed auto flow_control disable state enable  clear_description
config ports 16  learning enable
config ports 16  mdix auto                                                     
config ports 17  speed auto flow_control disable state enable  clear_description
config ports 17  learning enable
config ports 17  mdix auto
config ports 18  speed auto flow_control disable state enable  clear_description
config ports 18  learning enable
config ports 18  mdix auto
config ports 19  speed auto flow_control disable state enable  clear_description
config ports 19  learning enable
config ports 19  mdix auto
config ports 20  speed auto flow_control disable state enable  clear_description
config ports 20  learning enable
config ports 20  mdix auto
config ports 21  speed auto flow_control disable state enable  clear_description
config ports 21  learning enable
config ports 21  mdix auto
config ports 22  speed auto flow_control disable state enable  clear_description
config ports 22  learning enable
config ports 22  mdix auto
config ports 23  speed auto flow_control disable state enable  clear_description
config ports 23  learning enable
config ports 23  mdix auto
config ports 24  speed auto flow_control disable state enable  clear_description
config ports 24  learning enable
config ports 24  mdix auto
config ports 25 medium_type fiber speed auto flow_control disable state enable  clear_description
config ports 25 medium_type fiber learning enable
config ports 25  speed auto flow_control disable state enable  clear_description
config ports 25  learning enable
config ports 25  mdix auto
config ports 26 medium_type fiber speed auto flow_control disable state enable  clear_description
config ports 26 medium_type fiber learning enable
config ports 26  speed auto flow_control disable state enable  clear_description
config ports 26  learning enable
config ports 26  mdix auto
config ports 27  speed auto flow_control disable state enable  clear_description
config ports 27  learning enable
config ports 27  mdix auto
config ports 28  speed auto flow_control disable state enable  clear_description
config ports 28  learning enable
config ports 28  mdix auto

# TIME_RANGE                                                                   


# GM

config sim candidate
disable sim
config sim dp_interval 30
config sim hold_time 100

# MANAGEMENT

create trusted_host ***
enable snmp traps
enable snmp authenticate traps
disable rmon                                                                   

# SNMPv3

delete snmp community public
delete snmp community private
delete snmp user initial
delete snmp group initial
delete snmp view restricted all
delete snmp view CommunityView all
delete snmp group public
delete snmp group private
delete snmp group ReadGroup
delete snmp group WriteGroup
config snmp engineID 800000ab03001e58aed99e
create snmp view restricted 1.3.6.1.2.1.1 view_type included
create snmp view restricted 1.3.6.1.2.1.11 view_type included
create snmp view restricted 1.3.6.1.6.3.10.2.1 view_type included
create snmp view restricted 1.3.6.1.6.3.11.2.1 view_type included
create snmp view restricted 1.3.6.1.6.3.15.1.1 view_type included
create snmp view CommunityView 1 view_type included
create snmp view CommunityView 1.3.6.1.6.3 view_type excluded
create snmp view CommunityView 1.3.6.1.6.3.1 view_type included               
create snmp group public v1 read_view CommunityView notify_view CommunityView
create snmp group public v2c read_view CommunityView notify_view CommunityView
create snmp group initial v3  noauth_nopriv read_view restricted notify_view restricted
create snmp group private v1 read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group private v2c read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group ReadGroup v1 read_view CommunityView notify_view CommunityView
create snmp group ReadGroup v2c read_view CommunityView notify_view CommunityView
create snmp group WriteGroup v1 read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group WriteGroup v2c read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp community private view CommunityView read_write
create snmp community public view CommunityView read_only
create snmp user initial initial
create snmp host 88.201.129.14 v2c  public

# VLAN                                                                         

disable asymmetric_vlan
disable qinq
config vlan default delete 1-28
config vlan default add untagged 1-19,25-28
config vlan default advertisement enable
create vlan homenet tag 11
config vlan homenet add tagged 5,26
config vlan homenet add untagged 20
disable gvrp
config gvrp 1 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 2 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 3 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 4 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 5 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 6 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 7 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 8 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 9 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 10 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 11 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 12 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 13 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 14 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 15 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 16 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 17 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 18 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 19 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 20 state disable ingress_checking enable acceptable_frame admit_all pvid 11
config gvrp 21 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 22 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 23 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 24 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 25 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 26 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 27 state disable ingress_checking enable acceptable_frame admit_all pvid 1
config gvrp 28 state disable ingress_checking enable acceptable_frame admit_all pvid 1
                                                                               
# 8021X

disable 802.1x
config 802.1x auth_protocol radius_eap
config 802.1x capability ports 1 none
config 802.1x capability ports 2 none
config 802.1x capability ports 3 none
config 802.1x capability ports 4 none
config 802.1x capability ports 5 none
config 802.1x capability ports 6 none
config 802.1x capability ports 7 none
config 802.1x capability ports 8 none
config 802.1x capability ports 9 none
config 802.1x capability ports 10 none
config 802.1x capability ports 11 none
config 802.1x capability ports 12 none
config 802.1x capability ports 13 none
config 802.1x capability ports 14 none
config 802.1x capability ports 15 none
config 802.1x capability ports 16 none
config 802.1x capability ports 17 none                                         
config 802.1x capability ports 18 none
config 802.1x capability ports 19 none
config 802.1x capability ports 20 none
config 802.1x capability ports 21 none
config 802.1x capability ports 22 none
config 802.1x capability ports 23 none
config 802.1x capability ports 24 none
config 802.1x capability ports 25 none
config 802.1x capability ports 26 none
config 802.1x capability ports 27 none
config 802.1x capability ports 28 none
config 802.1x auth_parameter ports 1 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 3e
config 802.1x auth_parameter ports 2 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 3e
config 802.1x auth_parameter ports 3 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 3e
config 802.1x auth_parameter ports 4 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 3e
config 802.1x auth_parameter ports 5 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 3e
config 802.1x auth_parameter ports 6 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 3e
config 802.1x auth_parameter ports 7 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 3e
config 802.1x auth_parameter ports 8 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 3e
config 802.1x auth_parameter ports 9 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 3e
config 802.1x auth_parameter ports 10 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 11 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 12 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 13 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 14 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 15 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 16 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 17 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 18 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 19 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 20 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 21 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 22 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 23 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 24 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 25 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 26 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 27 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config 802.1x auth_parameter ports 28 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout e
config radius parameter timeout 5 retransmit 2

# PORT_LOCK

disable port_security trap_log
config port_security ports 1 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 2 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 3 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 4 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 5 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 6 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 7 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 8 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 9 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 10 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 11 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 12 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 13 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 14 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 15 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 16 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 17 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 18 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 19 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 20 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 21 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 22 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 23 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 24 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 25 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 26 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 27 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout
config port_security ports 28 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout

# FDB

config fdb aging_time 300
config multicast port_filtering_mode all  filter_unregistered_groups
config multicast port_filtering_mode 1-28  forward_unregistered_groups

# MAC_ADDRESS_TABLE_NOTIFICATION

config mac_notification interval 1 historysize 1
disable mac_notification
config mac_notification ports 1 disable
config mac_notification ports 2 disable
config mac_notification ports 3 disable
config mac_notification ports 4 disable
config mac_notification ports 5 disable                                       
config mac_notification ports 6 disable
config mac_notification ports 7 disable
config mac_notification ports 8 disable
config mac_notification ports 9 disable
config mac_notification ports 10 disable
config mac_notification ports 11 disable
config mac_notification ports 12 disable
config mac_notification ports 13 disable
config mac_notification ports 14 disable
config mac_notification ports 15 disable
config mac_notification ports 16 disable
config mac_notification ports 17 disable
config mac_notification ports 18 disable
config mac_notification ports 19 disable
config mac_notification ports 20 disable
config mac_notification ports 21 disable
config mac_notification ports 22 disable
config mac_notification ports 23 disable
config mac_notification ports 24 disable
config mac_notification ports 25 disable
config mac_notification ports 26 disable
config mac_notification ports 27 disable                                       
config mac_notification ports 28 disable

# STP

disable stp
config stp version rstp
config stp maxage 20 maxhops 20 forwarddelay 15 txholdcount 6 fbpdu enable hellotime 2 lbd enable lbd_recover_timer 60
config stp priority 32768 instance_id 0
config stp ports 1 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 1 instance_id 0 internalCost auto priority 128
config stp ports 1 fbpdu enable
config stp ports 1 restricted_role false
config stp ports 1 restricted_tcn false
config stp ports 2 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 2 instance_id 0 internalCost auto priority 128
config stp ports 2 fbpdu enable
config stp ports 2 restricted_role false
config stp ports 2 restricted_tcn false
config stp ports 3 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 3 instance_id 0 internalCost auto priority 128
config stp ports 3 fbpdu enable
config stp ports 3 restricted_role false
config stp ports 3 restricted_tcn false
config stp ports 4 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 4 instance_id 0 internalCost auto priority 128
config stp ports 4 fbpdu enable
config stp ports 4 restricted_role false
config stp ports 4 restricted_tcn false
config stp ports 5 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 5 instance_id 0 internalCost auto priority 128
config stp ports 5 fbpdu enable
config stp ports 5 restricted_role false
config stp ports 5 restricted_tcn false
config stp ports 6 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 6 instance_id 0 internalCost auto priority 128
config stp ports 6 fbpdu enable
config stp ports 6 restricted_role false                                       
config stp ports 6 restricted_tcn false
config stp ports 7 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 7 instance_id 0 internalCost auto priority 128
config stp ports 7 fbpdu enable
config stp ports 7 restricted_role false
config stp ports 7 restricted_tcn false
config stp ports 8 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 8 instance_id 0 internalCost auto priority 128
config stp ports 8 fbpdu enable
config stp ports 8 restricted_role false
config stp ports 8 restricted_tcn false
config stp ports 9 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 9 instance_id 0 internalCost auto priority 128
config stp ports 9 fbpdu enable
config stp ports 9 restricted_role false
config stp ports 9 restricted_tcn false
config stp ports 10 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 10 instance_id 0 internalCost auto priority 128           
config stp ports 10 fbpdu enable
config stp ports 10 restricted_role false
config stp ports 10 restricted_tcn false
config stp ports 11 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 11 instance_id 0 internalCost auto priority 128
config stp ports 11 fbpdu enable
config stp ports 11 restricted_role false
config stp ports 11 restricted_tcn false
config stp ports 12 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 12 instance_id 0 internalCost auto priority 128
config stp ports 12 fbpdu enable
config stp ports 12 restricted_role false
config stp ports 12 restricted_tcn false
config stp ports 13 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 13 instance_id 0 internalCost auto priority 128
config stp ports 13 fbpdu enable
config stp ports 13 restricted_role false
config stp ports 13 restricted_tcn false                                       
config stp ports 14 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 14 instance_id 0 internalCost auto priority 128
config stp ports 14 fbpdu enable
config stp ports 14 restricted_role false
config stp ports 14 restricted_tcn false
config stp ports 15 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 15 instance_id 0 internalCost auto priority 128
config stp ports 15 fbpdu enable
config stp ports 15 restricted_role false
config stp ports 15 restricted_tcn false
config stp ports 16 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 16 instance_id 0 internalCost auto priority 128
config stp ports 16 fbpdu enable
config stp ports 16 restricted_role false
config stp ports 16 restricted_tcn false
config stp ports 17 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 17 instance_id 0 internalCost auto priority 128
config stp ports 17 fbpdu enable                                               
config stp ports 17 restricted_role false
config stp ports 17 restricted_tcn false
config stp ports 18 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 18 instance_id 0 internalCost auto priority 128
config stp ports 18 fbpdu enable
config stp ports 18 restricted_role false
config stp ports 18 restricted_tcn false
config stp ports 19 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 19 instance_id 0 internalCost auto priority 128
config stp ports 19 fbpdu enable
config stp ports 19 restricted_role false
config stp ports 19 restricted_tcn false
config stp ports 20 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 20 instance_id 0 internalCost auto priority 128
config stp ports 20 fbpdu enable
config stp ports 20 restricted_role false
config stp ports 20 restricted_tcn false
config stp ports 21 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 21 instance_id 0 internalCost auto priority 128           
config stp ports 21 fbpdu enable
config stp ports 21 restricted_role false
config stp ports 21 restricted_tcn false
config stp ports 22 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 22 instance_id 0 internalCost auto priority 128
config stp ports 22 fbpdu enable
config stp ports 22 restricted_role false
config stp ports 22 restricted_tcn false
config stp ports 23 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 23 instance_id 0 internalCost auto priority 128
config stp ports 23 fbpdu enable
config stp ports 23 restricted_role false
config stp ports 23 restricted_tcn false
config stp ports 24 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 24 instance_id 0 internalCost auto priority 128
config stp ports 24 fbpdu enable
config stp ports 24 restricted_role false
config stp ports 24 restricted_tcn false                                       
config stp ports 25 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 25 instance_id 0 internalCost auto priority 128
config stp ports 25 fbpdu enable
config stp ports 25 restricted_role false
config stp ports 25 restricted_tcn false
config stp ports 26 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 26 instance_id 0 internalCost auto priority 128
config stp ports 26 fbpdu enable
config stp ports 26 restricted_role false
config stp ports 26 restricted_tcn false
config stp ports 27 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 27 instance_id 0 internalCost auto priority 128
config stp ports 27 fbpdu enable
config stp ports 27 restricted_role false
config stp ports 27 restricted_tcn false
config stp ports 28 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 28 instance_id 0 internalCost auto priority 128
config stp ports 28 fbpdu enable                                               
config stp ports 28 restricted_role false
config stp ports 28 restricted_tcn false
config stp mst_config_id name 00:1E:58:AE:D9:9E revision_level 0

# MULTI FILTER

config max_mcast_group port 1 max_group 256
config max_mcast_group port 2 max_group 256
config max_mcast_group port 3 max_group 256
config max_mcast_group port 4 max_group 256
config max_mcast_group port 5 max_group 256
config max_mcast_group port 6 max_group 256
config max_mcast_group port 7 max_group 256
config max_mcast_group port 8 max_group 256
config max_mcast_group port 9 max_group 256
config max_mcast_group port 10 max_group 256
config max_mcast_group port 11 max_group 256
config max_mcast_group port 12 max_group 256
config max_mcast_group port 13 max_group 256
config max_mcast_group port 14 max_group 256
config max_mcast_group port 15 max_group 256
config max_mcast_group port 16 max_group 256                                   
config max_mcast_group port 17 max_group 256
config max_mcast_group port 18 max_group 256
config max_mcast_group port 19 max_group 256
config max_mcast_group port 20 max_group 256
config max_mcast_group port 21 max_group 256
config max_mcast_group port 22 max_group 256
config max_mcast_group port 23 max_group 256
config max_mcast_group port 24 max_group 256
config max_mcast_group port 25 max_group 256
config max_mcast_group port 26 max_group 256
config max_mcast_group port 27 max_group 256
config max_mcast_group port 28 max_group 256

# SAFEGUARD_ENGINE

config safeguard_engine state disable utilization rising 30 falling 20 trap_log disable mode fuzzy

# BANNER_PROMP

config command_prompt default
config greeting_message default                                               

# SSH

config ssh algorithm 3DES enable
config ssh algorithm AES128 enable
config ssh algorithm AES192 enable
config ssh algorithm AES256 enable
config ssh algorithm arcfour enable
config ssh algorithm blowfish enable
config ssh algorithm cast128 enable
config ssh algorithm twofish128 enable
config ssh algorithm twofish192 enable
config ssh algorithm twofish256 enable
config ssh algorithm MD5 enable
config ssh algorithm SHA1 enable
config ssh algorithm RSA enable
config ssh algorithm DSA enable
config ssh authmode password enable
config ssh authmode publickey enable
config ssh authmode hostbased enable
config ssh server maxsession 8
config ssh server contimeout 120                                               
config ssh server authfail 2
config ssh server rekey never
config ssh user bill authmode password
disable ssh

# SNOOP

enable igmp_snooping forward_mcrouter_only
config igmp_snooping data_driven_learning max_learned_entry 56
config igmp_snooping vlan_name default host_timeout 260 router_timeout 260 leave_timer 2 state enable fast_leave disable
config igmp_snooping data_driven_learning vlan_name default aged_out disable
config igmp_snooping querier all query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state ee
config igmp_snooping vlan_name homenet host_timeout 260 router_timeout 260 leave_timer 2 state enable fast_leave disable
config igmp_snooping data_driven_learning vlan_name homenet aged_out disable
config router_ports default add 26
config router_ports_forbidden default add 1-19,25,27-28
config router_ports_forbidden homenet add 5,20
config igmp access_authentication port 1 state disable
config igmp access_authentication port 2 state disable                         
config igmp access_authentication port 3 state disable
config igmp access_authentication port 4 state disable
config igmp access_authentication port 5 state disable
config igmp access_authentication port 6 state disable
config igmp access_authentication port 7 state disable
config igmp access_authentication port 8 state disable
config igmp access_authentication port 9 state disable
config igmp access_authentication port 10 state disable
config igmp access_authentication port 11 state disable
config igmp access_authentication port 12 state disable
config igmp access_authentication port 13 state disable
config igmp access_authentication port 14 state disable
config igmp access_authentication port 15 state disable
config igmp access_authentication port 16 state disable
config igmp access_authentication port 17 state disable
config igmp access_authentication port 18 state disable
config igmp access_authentication port 19 state disable
config igmp access_authentication port 20 state disable
config igmp access_authentication port 21 state disable
config igmp access_authentication port 22 state disable
config igmp access_authentication port 23 state disable
config igmp access_authentication port 24 state disable                       
config igmp access_authentication port 25 state disable
config igmp access_authentication port 26 state disable
config igmp access_authentication port 27 state disable
config igmp access_authentication port 28 state disable

# VLAN_TRUNK

disable vlan_trunk

# SMTP

disable smtp

# ACL

disable cpu_interface_filtering

# SNTP

enable sntp
config time_zone operator + hour 3 min 0
config sntp primary 88.201.129.14 secondary 0.0.0.0 poll-interval 720         
config dst repeating s_week last s_day sun s_mth 3 s_time 2:0 e_week last e_day sun e_mth 10 e_time 2:0 offset 60

# DOS_PREVENTION

disable dos_prevention trap_log
config dos_prevention dos_type land_attack action drop state enable
config dos_prevention dos_type blat_attack action drop state enable
config dos_prevention dos_type smurf_attack action drop state enable
config dos_prevention dos_type tcp_null_scan action drop state enable
config dos_prevention dos_type tcp_xmascan action drop state enable
config dos_prevention dos_type tcp_synfin action drop state enable
config dos_prevention dos_type tcp_syn_srcport_less_1024 action drop state disable

# LACP

config lacp_port 1-28 mode passive
config link_aggregation algorithm mac_source

# ADDRBIND
                                                                               
config address_binding ip_mac ports 1 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 1 limit 5
config address_binding ip_mac ports 2 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 2 limit 5
config address_binding ip_mac ports 3 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 3 limit 5
config address_binding ip_mac ports 4 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 4 limit 5
config address_binding ip_mac ports 5 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 5 limit 5
config address_binding ip_mac ports 6 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 6 limit 5
config address_binding ip_mac ports 7 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 7 limit 5
config address_binding ip_mac ports 8 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 8 limit 5
config address_binding ip_mac ports 9 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 9 limit 5
config address_binding ip_mac ports 10 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 10 limit 5
config address_binding ip_mac ports 11 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 11 limit 5
config address_binding ip_mac ports 12 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 12 limit 5
config address_binding ip_mac ports 13 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 13 limit 5
config address_binding ip_mac ports 14 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 14 limit 5
config address_binding ip_mac ports 15 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 15 limit 5                   
config address_binding ip_mac ports 16 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 16 limit 5
config address_binding ip_mac ports 17 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 17 limit 5
config address_binding ip_mac ports 18 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 18 limit 5
config address_binding ip_mac ports 19 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 19 limit 5
config address_binding ip_mac ports 20 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 20 limit 5
config address_binding ip_mac ports 21 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 21 limit 5
config address_binding ip_mac ports 22 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 22 limit 5                   
config address_binding ip_mac ports 23 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 23 limit 5
config address_binding ip_mac ports 24 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 24 limit 5
config address_binding ip_mac ports 25 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 25 limit 5
config address_binding ip_mac ports 26 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 26 limit 5
config address_binding ip_mac ports 27 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 27 limit 5
config address_binding ip_mac ports 28 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding dhcp_snoop max_entry ports 28 limit 5
disable address_binding dhcp_snoop
disable address_binding trap_log                                               

# IP

config ipif System vlan default ipaddress *** state enable
config ipif System dhcp_option12 state disable
enable telnet 23
enable web 80
disable autoconfig

# LLDP

disable lldp
config lldp message_tx_interval 30
config lldp tx_delay 2
config lldp message_tx_hold_multiplier 4
config lldp reinit_delay 2
config lldp notification_interval 5
config lldp ports 1-28 notification disable
config lldp ports 1-28 admin_status tx_and_rx

# MLDSNP                                                                       


# ARP

config arp_aging time 20
config gratuitous_arp send ipif_status_up enable
config gratuitous_arp send dup_ip_detected enable
config gratuitous_arp learning enable

# AAA

config authen_login default method local
config authen_enable default method  local_enable
config authen application console login default
config authen application console enable default
config authen application telnet login default
config authen application telnet enable default
config authen application ssh login default
config authen application ssh enable default
config authen application http login default
config authen application http enable default
config authen parameter response_timeout 30                                   
config authen parameter attempt 3
disable authen_policy
config admin local_enable




# DHCP_RELAY

disable dhcp_relay
config dhcp_relay hops 4 time 0
config dhcp_relay option_82 state disable
config dhcp_relay option_82 check disable
config dhcp_relay option_82 policy replace
config dhcp_relay option_82 remote_id default

# DHCP_LOCAL_RELAY

disable dhcp_local_relay

# ROUTE
                                                                               
create iproute default *** 1

#-------------------------------------------------------------------
#             End of configuration file for DES-3028
#------------------------------------------------------------------

# MULTI FILTER

create mcast_filter_profile profile_id 1 profile_name IPTV
config max_mcast_group port 1 max_group 256
config max_mcast_group port 2 max_group 256
config max_mcast_group port 3 max_group 256
config max_mcast_group port 4 max_group 256
config max_mcast_group port 5 max_group 256
config max_mcast_group port 6 max_group 256
config max_mcast_group port 7 max_group 256
config max_mcast_group port 8 max_group 256
config max_mcast_group port 9 max_group 256
config max_mcast_group port 10 max_group 256
config max_mcast_group port 11 max_group 256
config max_mcast_group port 12 max_group 256
config max_mcast_group port 13 max_group 256
config max_mcast_group port 14 max_group 256
config max_mcast_group port 15 max_group 256
config max_mcast_group port 16 max_group 256
config max_mcast_group port 17 max_group 256
config max_mcast_group port 18 max_group 256
config max_mcast_group port 19 max_group 256
config max_mcast_group port 20 max_group 256
config max_mcast_group port 21 max_group 256
config max_mcast_group port 22 max_group 256
config max_mcast_group port 23 max_group 256
config max_mcast_group port 24 max_group 256
config max_mcast_group port 25 max_group 256
config max_mcast_group port 26 max_group 256
config max_mcast_group port 27 max_group 256
config max_mcast_group port 28 max_group 256
config mcast_filter_profile profile_id 1 add 224.0.0.1-224.0.0.2
config mcast_filter_profile profile_id 1 add 239.1.0.0-239.100.255.255
config limited_multicast_addr ports 1 add profile_id 1
config limited_multicast_addr ports 2 add profile_id 1
config limited_multicast_addr ports 3 add profile_id 1
config limited_multicast_addr ports 4 add profile_id 1
config limited_multicast_addr ports 5 add profile_id 1
config limited_multicast_addr ports 6 add profile_id 1
config limited_multicast_addr ports 7 add profile_id 1
config limited_multicast_addr ports 8 add profile_id 1
config limited_multicast_addr ports 9 add profile_id 1
config limited_multicast_addr ports 10 add profile_id 1
config limited_multicast_addr ports 11 add profile_id 1
config limited_multicast_addr ports 12 add profile_id 1
config limited_multicast_addr ports 13 add profile_id 1
config limited_multicast_addr ports 14 add profile_id 1
config limited_multicast_addr ports 15 add profile_id 1
config limited_multicast_addr ports 16 add profile_id 1
config limited_multicast_addr ports 17 add profile_id 1
config limited_multicast_addr ports 18 add profile_id 1
config limited_multicast_addr ports 19 add profile_id 1
config limited_multicast_addr ports 20 add profile_id 1
config limited_multicast_addr ports 21 add profile_id 1
config limited_multicast_addr ports 22 add profile_id 1
config limited_multicast_addr ports 23 add profile_id 1
config limited_multicast_addr ports 24 add profile_id 1
config limited_multicast_addr ports 25 delete profile_id 1
config limited_multicast_addr ports 26 delete profile_id 1
config limited_multicast_addr ports 27 delete profile_id 1
config limited_multicast_addr ports 28 delete profile_id 1

enable igmp_snooping forward_mcrouter_only
config igmp_snooping data_driven_learning max_learned_entry 56
config igmp_snooping vlan_name default host_timeout 260 router_timeout 260 leave_timer 1 state enable fast_leave disable
config igmp_snooping data_driven_learning vlan_name default aged_out disable
config igmp_snooping querier all query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state enable
config igmp_snooping vlan_name Realniki host_timeout 260 router_timeout 260 leave_timer 2 state enable fast_leave disable
config igmp_snooping data_driven_learning vlan_name Realniki aged_out disable
config igmp_snooping vlan_name switches1492 host_timeout 260 router_timeout 260 leave_timer 2 state enable fast_leave disable
config igmp_snooping data_driven_learning vlan_name switches1492 aged_out disable
config igmp_snooping vlan_name RU20anc host_timeout 260 router_timeout 260 leave_timer 2 state enable fast_leave disable
config igmp_snooping data_driven_learning vlan_name RU20anc aged_out disable
config router_ports Realniki add 25
config router_ports switches1492 add 25
config router_ports RU20anc add 25
config router_ports_forbidden RU20anc add 1-24

DES-3028:4#show vlan
Command: show vlan


VID             : 1           VLAN Name       : default
VLAN Type       : Static      Advertisement   : Enabled
Member Ports    :
Static Ports    :
Current Tagged Ports   :
Current Untagged Ports :
Static Tagged Ports    :
Static Untagged Ports  :
Forbidden Ports        :

VID             : 1491        VLAN Name       : Realniki
VLAN Type       : Static      Advertisement   : Disabled
Member Ports    : 25-28
Static Ports    : 25-28
Current Tagged Ports   : 25-28
Current Untagged Ports :
Static Tagged Ports    : 25-28
Static Untagged Ports  :
Forbidden Ports        :

VID             : 1492        VLAN Name       : switches1492
VLAN Type       : Static      Advertisement   : Disabled
Member Ports    : 25-28
Static Ports    : 25-28
Current Tagged Ports   : 25-28
Current Untagged Ports :
Static Tagged Ports    : 25-28
Static Untagged Ports  :
Forbidden Ports        :

VID             : 1501        VLAN Name       : RU20anc
VLAN Type       : Static      Advertisement   : Disabled
Member Ports    : 1-28
Static Ports    : 1-28
Current Tagged Ports   : 25-28
Current Untagged Ports : 1-24
Static Tagged Ports    : 25-28
Static Untagged Ports  : 1-24
Forbidden Ports        :


Total Entries  : 4

Device Type        : DES-3028 Fast Ethernet Switch
MAC Address        : 00-22-B0-50-A9-DF
IP Address         : 10.31.125.11 (Manual)
VLAN Name          : switches1492
Subnet Mask        : 255.255.252.0
Default Gateway    : 10.31.127.254
Boot PROM Version  : Build 1.00-B04
Firmware Version   : Build 2.10.B06
Hardware Version   : A1
System Name        :
System Location    : RU-20V-4
System Contact     : SwitchBilling
Spanning Tree      : Disabled
GVRP               : Disabled
IGMP Snooping      : Enabled
VLAN trunk         : Disabled
802.1x             : Disabled
TELNET             : Enabled(TCP  23)
WEB                : Enabled(TCP  2108)
RMON               : Disabled
SSH                : Disabled
SSL                : Disabled
Clipaging          : Enabled
Syslog Global State: Disabled
Dual Image         : Supported
Password Encryption Status : Enabled

DES-3028:4#show igmp_snooping forwarding
Command: show igmp_snooping forwarding

 VLAN Name      : Realniki
 Multicast Group: 224.0.0.2
 MAC Address    : 01-00-5E-00-00-02
 Member Ports   : 25-26

 VLAN Name      : Realniki
 Multicast Group: 224.0.0.22
 MAC Address    : 01-00-5E-00-00-16
 Member Ports   : 25-26

 VLAN Name      : Realniki
 Multicast Group: 224.0.0.251
 MAC Address    : 01-00-5E-00-00-FB
 Member Ports   : 25-26

 VLAN Name      : Realniki
 Multicast Group: 224.0.0.252
 MAC Address    : 01-00-5E-00-00-FC
 Member Ports   : 25-26

 VLAN Name      : Realniki
 Multicast Group: 224.0.0.253
 MAC Address    : 01-00-5E-00-00-FD
 Member Ports   : 25-26

 VLAN Name      : Realniki
 Multicast Group: 239.255.255.250
 MAC Address    : 01-00-5E-7F-FF-FA
 Member Ports   : 25-26

 VLAN Name      : switches1492
 Multicast Group: 224.0.0.2
 MAC Address    : 01-00-5E-00-00-02
 Member Ports   : 25-26

 VLAN Name      : switches1492
 Multicast Group: 224.0.0.22
 MAC Address    : 01-00-5E-00-00-16
 Member Ports   : 25-26

 VLAN Name      : RU20anc
 Multicast Group: 224.0.0.2
 MAC Address    : 01-00-5E-00-00-02
 Member Ports   : 25-26

 VLAN Name      : RU20anc
 Multicast Group: 224.0.0.9
 MAC Address    : 01-00-5E-00-00-09
 Member Ports   : 25-26

 VLAN Name      : RU20anc
 Multicast Group: 224.0.0.22
 MAC Address    : 01-00-5E-00-00-16
 Member Ports   : 25-26

 VLAN Name      : RU20anc
 Multicast Group: 224.0.0.251
 MAC Address    : 01-00-5E-00-00-FB
 Member Ports   : 8,20,24-26

 VLAN Name      : RU20anc
 Multicast Group: 224.0.0.252
 MAC Address    : 01-00-5E-00-00-FC
 Member Ports   : 7,25-26

 VLAN Name      : RU20anc
 Multicast Group: 224.0.0.253
 MAC Address    : 01-00-5E-00-00-FD
 Member Ports   : 25-26

 VLAN Name      : RU20anc
 Multicast Group: 238.149.64.0
 MAC Address    : 01-00-5E-15-40-00
 Member Ports   : 25-26

 VLAN Name      : RU20anc
 Multicast Group: 239.192.152.143
 MAC Address    : 01-00-5E-40-98-8F
 Member Ports   : 1,7,20,24-26

 VLAN Name      : RU20anc
 Multicast Group: 239.255.255.250
 MAC Address    : 01-00-5E-7F-FF-FA
 Member Ports   : 1,4,7-8,20,24-26


 Total Entries : 17

DES-3028:4#