ID  Version   Size(B)  Update Time          From                User
--  --------  -------  -------------------  ------------------  ---------------
 1  3.06-B20  2551101  00000 days 00:00:00  Serial Port (PROM)  Unknown
*2  6.00.B28  3380908  2009/11/30 04:08:29  10.10.10.100(S)     SNMPUser

ID  Version   Size(B)  Update Time          From                User
--  --------  -------  -------------------  ------------------  ---------------
*1  6.00.B28  3380908  2009/11/30 04:09:05  10.10.10.100(S)     SNMPUser
 2  (Empty)

create authen server_host 192.168.0.3 protocol radius port 1812 key "radauthsw" timeout 2 retransmit 3
config authen server_group radius delete server_host 192.168.0.3 protocol radius
config authen server_group radius add server_host 192.168.0.3 protocol radius
create authen_login method_list_name login_list
config authen_login method_list_name login_list method radius local
config authen application telnet login method_list_name login_list
config authen application http login method_list_name login_list
config authen application console login method_list_name login_list
config authen application ssh login method_list_name login_list
create authen_enable method_list_name enable_list
config authen_enable method_list_name enable_list method radius local_enable
config authen application telnet enable method_list_name enable_list
config authen application console enable method_list_name enable_list
config authen application ssh enable method_list_name enable_list
config authen application http enable method_list_name enable_list
config authen parameter response_timeout 20
config authen parameter attempt 3
enable authen_policy
config loopdetect ports 1-24 state enabled
enable loopdetect
config multicast port_filtering_mode all filter_unregistered_groups
config multicast port_filtering_mode 25-26 forward_unregistered_groups
enable igmp_snooping
config igmp_snooping all state enable
config igmp_snooping querier all state enable
config traffic control all threshold 500 action drop broadcast enable
config traffic control all threshold 500 action drop unicast enable
config traffic control 4-5 thresold 255000 broadcast disable
config safeguard_engine state enable cpu_utilization rising_threshold 100 falling_threshold 60 trap_log disable
create syslog host 1 ipaddress 192.168.0.3 severity all facility local0 udp_port 514 state enable
enable syslog
config sntp primary 192.168.0.3 secondary 172.16.0.2
enable sntp
config time_zone operator + hour 4 min 0
# ACLs
delete access_profile all
# Access to 192.168.0.3
create access_profile ip source_ip_mask 255.255.255.255 destination_ip_mask 255.255.255.255 profile_id 3
# Access to 192.168.0.5
create access_profile ip source_ip_mask 255.255.255.255 destination_ip_mask 255.255.255.255 profile_id 5
# Profile allow ip to any
create access_profile ip source_ip_mask 255.255.255.255 destination_ip_mask 0.0.0.0 profile_id 10
# Profile deny any to any
create access_profile ip source_ip_mask 0.0.0.0 destination_ip_mask 0.0.0.0 profile_id 20
# Block 135,139,445 TCP
create access_profile ip tcp dst_port_mask 0xFFFF profile_id 50
config access_profile profile_id 50 add access_id auto_assign ip tcp dst_port 135 port 1-26 deny
config access_profile profile_id 50 add access_id auto_assign ip tcp dst_port 139 port 1-26 deny
config access_profile profile_id 50 add access_id auto_assign ip tcp dst_port 445 port 1-26 deny
# Block 135,139,445 TCP
create access_profile ip udp dst_port_mask 0xFFFF profile_id 51
config access_profile profile_id 51 add access_id auto_assign ip udp dst_port 135 port 1-26 deny
config access_profile profile_id 51 add access_id auto_assign ip udp dst_port 139 port 1-26 deny
config access_profile profile_id 51 add access_id auto_assign ip udp dst_port 445 port 1-26 deny

delete snmp community private
create snmp community ****** view CommunityView read_write