-------------------------------------------------------------------------------
#                        DES-3528 Fast Ethernet Switch
#                                Configuration
#
#                          Firmware: Build 2.21.B054
#           Copyright(C) 2009 D-Link Corporation. All rights reserved.
#-------------------------------------------------------------------------------
 

# STACK


# BASIC


# PASSWORD ENCRYPTION
enable password encryption
config serial_port auto_logout never
disable telnet
enable web 80
enable clipaging

# STORM

config traffic trap both
config traffic control  1-24 broadcast enable multicast enable unicast enable action drop threshold 12 countdown 0 time_interval 5
config traffic control  25-28 broadcast enable multicast enable unicast enable action drop threshold 128 countdown 0 time_interval 5

# LOOP_DETECT

enable loopdetect
config loopdetect trap both
config loopdetect ports 1-24 state enable

# GM

config sim candidate
disable sim
config sim dp_interval 30
config sim hold_time 100

# GM_H


# SYSLOG

enable syslog
config system_severity log information
config system_severity trap information
create syslog host 1 severity all facility local0 udp_port 514 ipaddress 172.25.4.91 state enable
create syslog host 2 severity all facility local0 udp_port 514 ipaddress 172.25.4.2 state enable
config log_save_timing time_interval 2

# QOS

enable hol_prevention
config 802.1p default_priority 1-28 0
config bandwidth_control 1-28 rx_rate no_limit tx_rate no_limit
config cos bandwidth_control ports 1-28 0 min_rate  no_limit  max_rate no_limit
config cos bandwidth_control ports 1-28 1 min_rate  no_limit  max_rate no_limit
config cos bandwidth_control ports 1-28 2 min_rate  no_limit  max_rate no_limit
config cos bandwidth_control ports 1-28 3 min_rate  no_limit  max_rate no_limit
config cos bandwidth_control ports 1-28 4 min_rate  no_limit  max_rate no_limit
config cos bandwidth_control ports 1-28 5 min_rate  no_limit  max_rate no_limit
config cos bandwidth_control ports 1-28 6 min_rate  no_limit  max_rate no_limit
config scheduling_mechanism ports 1-28 strict
config scheduling ports 1-28 0  weight 1
config scheduling ports 1-28 1  weight 2
config scheduling ports 1-28 2  weight 3
config scheduling ports 1-28 3  weight 4
config scheduling ports 1-28 4  weight 5
config scheduling ports 1-28 5  weight 6
config scheduling ports 1-28 6  weight 7
config 802.1p user_priority ports 1-28 0  2
config 802.1p user_priority ports 1-28 1  0
config 802.1p user_priority ports 1-28 2  1
config 802.1p user_priority ports 1-28 3  3
config 802.1p user_priority ports 1-28 4  4
config 802.1p user_priority ports 1-28 5  5
config 802.1p user_priority ports 1-28 6  6
config 802.1p user_priority ports 1-28 7  6

# MIRROR

disable mirror

# TRAF-SEGMENTATION

config traffic_segmentation 1-25,27-28 forward_list 26
config traffic_segmentation 26 forward_list 1-25,27-28

# SSL

disable ssl
enable ssl ciphersuite RSA_with_RC4_128_MD5
enable ssl ciphersuite RSA_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite DHE_DSS_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5
config ssl cachetimeout 600

# PORT

disable jumbo_frame
config ports 1-24,27-28 speed auto flow_control disable learning enable state enable mdix auto
config ports 25-26 medium_type copper speed auto flow_control disable learning enable state enable mdix auto
config ports 25-26 medium_type fiber speed auto flow_control disable learning enable state enable mdix auto

# SFLOW


# OAM


# PORT_LOCK

enable port_security trap_log
config port_security ports 1-24 admin_state enable max_learning_addr 3 lock_address_mode DeleteOnTimeout
config port_security ports 25-28 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnReset

# SNMPv3

delete snmp community public
delete snmp community private
delete snmp user initial
delete snmp group initial
delete snmp view restricted all
delete snmp view CommunityView all
delete snmp group ReadGroup
delete snmp group WriteGroup
config snmp engineID 800000ab03001e589efa4e
create snmp view restricted 1.3.6.1.2.1.1 view_type included
create snmp view restricted 1.3.6.1.2.1.11 view_type included
create snmp view restricted 1.3.6.1.6.3.10.2.1 view_type included
create snmp view restricted 1.3.6.1.6.3.11.2.1 view_type included
create snmp view restricted 1.3.6.1.6.3.15.1.1 view_type included
create snmp view CommunityView 1 view_type included
create snmp view CommunityView 1.3.6.1.6.3 view_type excluded
create snmp view CommunityView 1.3.6.1.6.3.1 view_type included
create snmp group xxxx v1 read_view CommunityView notify_view CommunityView
create snmp group xxxx v2c read_view CommunityView notify_view CommunityView
create snmp group xxxx v1 read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group xxxx v2c read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group public v1 read_view CommunityView notify_view CommunityView
create snmp group public v2c read_view CommunityView notify_view CommunityView
create snmp group initial v3  noauth_nopriv read_view restricted notify_view restricted
create snmp group private v1 read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group private v2c read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group WriteGroup v2c read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp community ttttt view CommunityView read_only
create snmp community tttttt view CommunityView read_write
create snmp user initial initial
create snmp host 172.25.4.1 v2c  xxxxxxxx
create snmp host 172.25.4.2 v2c  xxxxxxxx
create snmp host 172.25.4.252 v2c  xxxxxx
create snmp host 172.25.4.91 v2c  xxxxxx
create snmp host 172.25.4.1 v2c  xxxxxxx
create snmp host 172.25.4.2 v2c  xxxxxxx
create snmp host 172.25.4.252 v2c  xxxxxxxx
create snmp host 172.25.4.91 v2c  xxxxxxxxxx

# SNMPv3User [H]

config snmp engine reboot 3

# MANAGEMENT

create trusted_host network 172.25.4.91/255.255.255.255
create trusted_host network 172.25.4.1/255.255.255.255
create trusted_host network 172.25.4.252/255.255.255.255
enable snmp traps
enable snmp authenticate_traps
enable snmp
enable snmp linkchange_traps
config snmp linkchange_traps ports 1-28 enable

# VLAN

enable pvid auto_assign
config vlan default delete 1-28
config vlan default advertisement enable
create vlan Vlan_7 tag 7
config vlan Vlan_7 add tagged 25-28
config vlan Vlan_7 add untagged 1-24 advertisement disable
create vlan Vlan_254 tag 254
config vlan Vlan_254 add tagged 25-28 advertisement disable
create vlan Vlan_888 tag 888
config vlan Vlan_888 add tagged 25-28 advertisement disable
disable gvrp
config gvrp nni_bpdu_addr dot1ad
disable asymmetric_vlan
disable vlan_trunk
config port_vlan 1-24 gvrp_state disable ingress_checking enable acceptable_frame admit_all pvid 7
config port_vlan 25-28 gvrp_state disable ingress_checking enable acceptable_frame admit_all pvid 1

# SUBNETVLAN

config vlan_precedence port 1-28 mac_based_vlan

# PROTOCOL_VLAN


# QINQ

config qinq inner_tpid 0x8100
config qinq ports 1-28  missdrop disable outer_tpid 0x8100
config qinq ports 1-28  add_inner_tag disable
config qinq ports 1-28  vlan_preservation enable

# RSPAN

disable rspan

# 8021X

disable 802.1x
config 802.1x auth_mode port_based
config 802.1x auth_protocol radius_eap
config 802.1x fwd_pdu system disable
config 802.1x max_users 448
config 802.1x authorization network radius enable
config 802.1x capability ports 1-28 none
config 802.1x auth_parameter ports 1-28 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x auth_parameter ports 1-28 max_users 16

# guestvlan


# TR


# ACL

create access_profile profile_id 4 profile_name prof_4 ethernet ethernet_type
config access_profile profile_id 4 add access_id 1 ethernet ethernet_type 0x806  port 1 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 2 ethernet ethernet_type 0x806  port 2 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 3 ethernet ethernet_type 0x806  port 3 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 4 ethernet ethernet_type 0x806  port 4 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 5 ethernet ethernet_type 0x806  port 5 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 6 ethernet ethernet_type 0x806  port 6 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 7 ethernet ethernet_type 0x806  port 7 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 8 ethernet ethernet_type 0x806  port 8 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 9 ethernet ethernet_type 0x806  port 9 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 10 ethernet ethernet_type 0x806  port 10 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 11 ethernet ethernet_type 0x806  port 11 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 12 ethernet ethernet_type 0x806  port 12 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 13 ethernet ethernet_type 0x806  port 13 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 14 ethernet ethernet_type 0x806  port 14 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 15 ethernet ethernet_type 0x806  port 15 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 16 ethernet ethernet_type 0x806  port 16 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 17 ethernet ethernet_type 0x806  port 17 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 18 ethernet ethernet_type 0x806  port 18 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 19 ethernet ethernet_type 0x806  port 19 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 20 ethernet ethernet_type 0x806  port 20 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 21 ethernet ethernet_type 0x806  port 21 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 22 ethernet ethernet_type 0x806  port 22 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 23 ethernet ethernet_type 0x806  port 23 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 24 ethernet ethernet_type 0x806  port 24 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 25 ethernet ethernet_type 0x806  port 25 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 26 ethernet ethernet_type 0x806  port 26 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 27 ethernet ethernet_type 0x806  port 27 permit rx_rate no_limit
config access_profile profile_id 4 add access_id 28 ethernet ethernet_type 0x806  port 28 permit rx_rate no_limit
create access_profile profile_id 9 profile_name prof_9 ethernet ethernet_type
config access_profile profile_id 9 add access_id 1 ethernet ethernet_type 0x800  port 1 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 2 ethernet ethernet_type 0x800  port 2 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 3 ethernet ethernet_type 0x800  port 3 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 4 ethernet ethernet_type 0x800  port 4 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 5 ethernet ethernet_type 0x800  port 5 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 6 ethernet ethernet_type 0x800  port 6 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 7 ethernet ethernet_type 0x800  port 7 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 8 ethernet ethernet_type 0x800  port 8 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 9 ethernet ethernet_type 0x800  port 9 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 10 ethernet ethernet_type 0x800  port 10 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 11 ethernet ethernet_type 0x800  port 11 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 12 ethernet ethernet_type 0x800  port 12 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 13 ethernet ethernet_type 0x800  port 13 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 14 ethernet ethernet_type 0x800  port 14 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 15 ethernet ethernet_type 0x800  port 15 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 16 ethernet ethernet_type 0x800  port 16 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 17 ethernet ethernet_type 0x800  port 17 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 18 ethernet ethernet_type 0x800  port 18 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 19 ethernet ethernet_type 0x800  port 19 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 20 ethernet ethernet_type 0x800  port 20 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 21 ethernet ethernet_type 0x800  port 21 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 22 ethernet ethernet_type 0x800  port 22 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 23 ethernet ethernet_type 0x800  port 23 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 24 ethernet ethernet_type 0x800  port 24 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 25 ethernet ethernet_type 0x800  port 25 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 26 ethernet ethernet_type 0x800  port 26 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 27 ethernet ethernet_type 0x800  port 27 permit rx_rate no_limit
config access_profile profile_id 9 add access_id 28 ethernet ethernet_type 0x800  port 28 permit rx_rate no_limit
create access_profile profile_id 10 profile_name prof_10 ethernet source_mac 00-00-00-00-00-00
config access_profile profile_id 10 add access_id 1 ethernet source_mac 00-00-00-00-00-00  port 1 deny
config access_profile profile_id 10 add access_id 2 ethernet source_mac 00-00-00-00-00-00  port 2 deny
config access_profile profile_id 10 add access_id 3 ethernet source_mac 00-00-00-00-00-00  port 3 deny
config access_profile profile_id 10 add access_id 4 ethernet source_mac 00-00-00-00-00-00  port 4 deny
config access_profile profile_id 10 add access_id 5 ethernet source_mac 00-00-00-00-00-00  port 5 deny
config access_profile profile_id 10 add access_id 6 ethernet source_mac 00-00-00-00-00-00  port 6 deny
config access_profile profile_id 10 add access_id 7 ethernet source_mac 00-00-00-00-00-00  port 7 deny
config access_profile profile_id 10 add access_id 8 ethernet source_mac 00-00-00-00-00-00  port 8 deny
config access_profile profile_id 10 add access_id 9 ethernet source_mac 00-00-00-00-00-00  port 9 deny
config access_profile profile_id 10 add access_id 10 ethernet source_mac 00-00-00-00-00-00  port 10 deny
config access_profile profile_id 10 add access_id 11 ethernet source_mac 00-00-00-00-00-00  port 11 deny
config access_profile profile_id 10 add access_id 12 ethernet source_mac 00-00-00-00-00-00  port 12 deny
config access_profile profile_id 10 add access_id 13 ethernet source_mac 00-00-00-00-00-00  port 13 deny
config access_profile profile_id 10 add access_id 14 ethernet source_mac 00-00-00-00-00-00  port 14 deny
config access_profile profile_id 10 add access_id 15 ethernet source_mac 00-00-00-00-00-00  port 15 deny
config access_profile profile_id 10 add access_id 16 ethernet source_mac 00-00-00-00-00-00  port 16 deny
config access_profile profile_id 10 add access_id 17 ethernet source_mac 00-00-00-00-00-00  port 17 deny
config access_profile profile_id 10 add access_id 18 ethernet source_mac 00-00-00-00-00-00  port 18 deny
config access_profile profile_id 10 add access_id 19 ethernet source_mac 00-00-00-00-00-00  port 19 deny
config access_profile profile_id 10 add access_id 20 ethernet source_mac 00-00-00-00-00-00  port 20 deny
config access_profile profile_id 10 add access_id 21 ethernet source_mac 00-00-00-00-00-00  port 21 deny
config access_profile profile_id 10 add access_id 22 ethernet source_mac 00-00-00-00-00-00  port 22 deny
config access_profile profile_id 10 add access_id 23 ethernet source_mac 00-00-00-00-00-00  port 23 deny
config access_profile profile_id 10 add access_id 24 ethernet source_mac 00-00-00-00-00-00  port 24 deny
config access_profile profile_id 10 add access_id 25 ethernet source_mac 00-00-00-00-00-00  port 25 deny
config access_profile profile_id 10 add access_id 27 ethernet source_mac 00-00-00-00-00-00  port 27 deny
config access_profile profile_id 10 add access_id 28 ethernet source_mac 00-00-00-00-00-00  port 28 deny

#CPU Interface Filter

disable cpu_interface_filtering

# POE


# FDB

config fdb aging_time 300

# ADDRBIND

config address_binding ip_mac ports 1-28 forward_dhcppkt enable
disable address_binding dhcp_snoop
disable address_binding dhcp_snoop ipv6
disable address_binding nd_snoop
enable address_binding trap_log
disable address_binding arp_inspection
config address_binding dhcp_snoop max_entry ports 1-28 limit no_limit

# NetBiosFilter

config filter netbios all state disable
config filter netbios 1-28 state enable
config filter extensive_netbios all state disable
config filter extensive_netbios 1-28 state enable

# DHCPV6_SNOOPING


# DhcpServerScreening

config filter dhcp_server port all state disable
config filter dhcp_server port 1-24 state enable
config filter dhcp_server illegal_server_log_suppress_duration 5min
config filter dhcp_server trap_log enable

# ND_SNOOPING


# sRED

disable sred
config dscp trust all state disable
config sred all  all threshold low 60 high 80 drop_rate low 1 high 1 drop_green disable
config 802.1p map all 1p_color 0-7 to green
config dscp map all dscp_color 0-63 to green
config dscp map all dscp_dscp 0 to 0
config dscp map all dscp_dscp 1 to 1
config dscp map all dscp_dscp 2 to 2
config dscp map all dscp_dscp 3 to 3
config dscp map all dscp_dscp 4 to 4
config dscp map all dscp_dscp 5 to 5
config dscp map all dscp_dscp 6 to 6
config dscp map all dscp_dscp 7 to 7
config dscp map all dscp_dscp 8 to 8
config dscp map all dscp_dscp 9 to 9
config dscp map all dscp_dscp 10 to 10
config dscp map all dscp_dscp 11 to 11
config dscp map all dscp_dscp 12 to 12
config dscp map all dscp_dscp 13 to 13
config dscp map all dscp_dscp 14 to 14
config dscp map all dscp_dscp 15 to 15
config dscp map all dscp_dscp 16 to 16
config dscp map all dscp_dscp 17 to 17
config dscp map all dscp_dscp 18 to 18
config dscp map all dscp_dscp 19 to 19
config dscp map all dscp_dscp 20 to 20
config dscp map all dscp_dscp 21 to 21
config dscp map all dscp_dscp 22 to 22
config dscp map all dscp_dscp 23 to 23
config dscp map all dscp_dscp 24 to 24
config dscp map all dscp_dscp 25 to 25
config dscp map all dscp_dscp 26 to 26
config dscp map all dscp_dscp 27 to 27
config dscp map all dscp_dscp 28 to 28
config dscp map all dscp_dscp 29 to 29
config dscp map all dscp_dscp 30 to 30
config dscp map all dscp_dscp 31 to 31
config dscp map all dscp_dscp 32 to 32
config dscp map all dscp_dscp 33 to 33
config dscp map all dscp_dscp 34 to 34
config dscp map all dscp_dscp 35 to 35
config dscp map all dscp_dscp 36 to 36
config dscp map all dscp_dscp 37 to 37
config dscp map all dscp_dscp 38 to 38
config dscp map all dscp_dscp 39 to 39
config dscp map all dscp_dscp 40 to 40
config dscp map all dscp_dscp 41 to 41
config dscp map all dscp_dscp 42 to 42
config dscp map all dscp_dscp 43 to 43
config dscp map all dscp_dscp 44 to 44
config dscp map all dscp_dscp 45 to 45
config dscp map all dscp_dscp 46 to 46
config dscp map all dscp_dscp 47 to 47
config dscp map all dscp_dscp 48 to 48
config dscp map all dscp_dscp 49 to 49
config dscp map all dscp_dscp 50 to 50
config dscp map all dscp_dscp 51 to 51
config dscp map all dscp_dscp 52 to 52
config dscp map all dscp_dscp 53 to 53
config dscp map all dscp_dscp 54 to 54
config dscp map all dscp_dscp 55 to 55
config dscp map all dscp_dscp 56 to 56
config dscp map all dscp_dscp 57 to 57
config dscp map all dscp_dscp 58 to 58
config dscp map all dscp_dscp 59 to 59
config dscp map all dscp_dscp 60 to 60
config dscp map all dscp_dscp 61 to 61
config dscp map all dscp_dscp 62 to 62
config dscp map all dscp_dscp 63 to 63
config dscp map all dscp_priority 0-7 to 0
config dscp map all dscp_priority 8-15 to 1
config dscp map all dscp_priority 16-23 to 2
config dscp map all dscp_priority 24-31 to 3
config dscp map all dscp_priority 32-39 to 4
config dscp map all dscp_priority 40-47 to 5
config dscp map all dscp_priority 48-55 to 6
config dscp map all dscp_priority 56-63 to 7

# ARPSpoofingPrevention

config arp_spoofing_prevention add  gateway_ip 10.109.128.1 gateway_mac 00-1C-F0-22-39-01 ports 1-28
config arp_spoofing_prevention add  gateway_ip 10.109.131.131 gateway_mac 00-0C-29-9D-9E-7B ports 1-28
config arp_spoofing_prevention add  gateway_ip 10.109.138.138 gateway_mac 00-0C-29-18-0B-E0 ports 1-28
config arp_spoofing_prevention add  gateway_ip 10.109.140.57 gateway_mac 00-0C-29-68-40-9D ports 1-28
config arp_spoofing_prevention add  gateway_ip 10.109.140.189 gateway_mac 00-0C-29-FA-01-C7 ports 1-28

# PPPoE

config pppoe circuit_id_insertion state disable

# PORT_CTRL


# MAC_ADDRESS_TABLE_NOTIFICATION

enable mac_notification
config mac_notification interval 1 historysize 3
config mac_notification ports 1-24 enable
config mac_notification ports 25-28 disable

# STP

 config stp version rstp
 config stp maxage 20 maxhops 20 forwarddelay 15 txholdcount 6 fbpdu disable hellotime 2 nni_bpdu_addr dot1d
 config stp priority 32768 instance_id 0
 config stp mst_config_id name 1C:AF:F7:4C:61:B0 revision_level 0
 disable stp
 config stp ports 1-28 externalCost auto  edge false p2p auto state enable restricted_role false restricted_tcn false
 config stp mst_ports 1-28 instance_id 0 internalCost auto priority 128
config stp ports 1-28 fbpdu disable

# MULTI FILTER


# BPDU_PROTECTION

config bpdu_protection ports 1-28 mode drop

# SAFEGUARD_ENGINE

config safeguard_engine state enable utilization rising 30 falling 20 trap_log disable mode fuzzy

# BANNER_PROMP

config command_prompt default
config greeting_message default

# SSH

 config ssh algorithm 3DES enable
 config ssh algorithm AES128 enable
 config ssh algorithm AES192 enable
 config ssh algorithm AES256 enable
 config ssh algorithm arcfour enable
 config ssh algorithm blowfish enable
 config ssh algorithm cast128 enable
 config ssh algorithm twofish128 enable
 config ssh algorithm twofish192 enable
 config ssh algorithm twofish256 enable
 config ssh algorithm MD5 enable
 config ssh algorithm SHA1 enable
 config ssh algorithm RSA enable
 config ssh algorithm DSA enable
 config ssh authmode password enable
 config ssh authmode publickey enable
 config ssh authmode hostbased enable
 config ssh server maxsession 8
 config ssh server contimeout 120
 config ssh server authfail 2
 config ssh server rekey never
 config ssh user x1 authmode password
 config ssh user x2 authmode password
 config ssh user x3 authmode password
 config ssh user x4 authmode password
 enable ssh

# SNTP

enable sntp
config time_zone operator + hour 2 min 0
config sntp primary 172.25.4.252 secondary 0.0.0.0 poll-interval 720
config dst repeating s_week 1 s_day sun s_mth 4 s_time 0:0 e_week last e_day sun e_mth 10 e_time 0:0 offset 60
config dst annual s_date 29 s_mth 4 s_time 0:0 e_date 12 e_mth 10 e_time 0:0 offset 60

# LACP

config link_aggregation algorithm mac_source
config lacp_port 1-28 mode passive

# IP

config ipif System ipaddress 172.25.4.36/16 vlan Vlan_888
config ipif System dhcpv6_client disable
config ipif System proxy_arp disable local disable
config ipif System dhcpv6_client disable
disable autoconfig

# VOICEVLAN


# WAC

 config wac switch_http_port 80
config wac method local
 config wac authorization attributes local enable
 config wac authorization attributes radius enable
 disable wac
config wac ports 1-28 aging_time 1440 idle_time infinite block_time 60

# CFM


# JWAC

config jwac switch_http_port 80
config jwac clear_quarantine_server_url
config jwac radius_protocol pap
disable jwac quarantine_server_monitor
config jwac quarantine_server_error_timeout 30
enable jwac forcible_logout
enable jwac udp_filtering
enable jwac redirect
config jwac redirect destination quarantine_server delay_time 1
disable jwac
config jwac authenticate_page english
config jwac authorization attributes radius enable
config jwac authorization attributes local enable
config jwac ports 1-28 auth_mode host_based max_authenticating_host 50 aging_time 1440 idle_time infinite block_time 60

# MEF

 config mef_l2_protocols port 1-28 peer addr_00_0F
 config mef_l2_protocols port  forward addr_00_0F
 config mef_l2_protocols port  drop addr_00_0F
 config mef_l2_protocols port 1-28 peer addr_10
 config mef_l2_protocols port  forward addr_10
 config mef_l2_protocols port  drop addr_10
 config mef_l2_protocols port 1-28 peer addr_20_2F
 config mef_l2_protocols port  forward addr_20_2F
 config mef_l2_protocols port  drop addr_20_2F

# LLDP

disable lldp
config lldp message_tx_interval 30
config lldp tx_delay 2
config lldp message_tx_hold_multiplier 4
config lldp reinit_delay 2
config lldp notification_interval 5
config lldp ports 1-28 notification disable
config lldp ports 1-28 admin_status tx_and_rx

# ISM_VLAN

config igmp_snooping multicast_vlan forward_unmatched disable

# MBA

disable mac_based_access_control
config mac_based_access_control authorization attributes radius enable local enable
config mac_based_access_control ports 1-28 state disable
config mac_based_access_control ports  1-28 mode host_based
config mac_based_access_control method local
config mac_based_access_control password default
config mac_based_access_control max_users 128

# MLDM_VLAN

config mld_snooping multicast_vlan forward_unmatched disable

# MCFILTER

config multicast vlan_filtering_mode vlanid 1 forward_unregistered_groups
config multicast vlan_filtering_mode vlanid 7 forward_unregistered_groups
config multicast vlan_filtering_mode vlanid 254 forward_unregistered_groups
config multicast vlan_filtering_mode vlanid 888 forward_unregistered_groups

# COMPOUND_AUTHENTICATION

 config authentication ports 1-28 auth_mode host_based
 config authentication ports 1-28 multi_authen_methods none
 enable authorization attributes
 config authentication server failover block

# IGMP_SNOOPING

config igmp_snooping data_driven_learning max_learned_entry 128
config igmp_snooping vlan default fast_leave disable report_suppression enable state disable
config igmp_snooping querier vlan default query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3
config igmp_snooping data_driven_learning vlan default state enable aged_out disable expiry_time 260
config igmp_snooping vlan Vlan_7 fast_leave disable report_suppression enable state disable
config igmp_snooping querier vlan Vlan_7 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3
config igmp_snooping data_driven_learning vlan Vlan_7 state enable aged_out disable expiry_time 260
config igmp_snooping vlan Vlan_254 fast_leave disable report_suppression enable state disable
config igmp_snooping querier vlan Vlan_254 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3
config igmp_snooping data_driven_learning vlan Vlan_254 state enable aged_out disable expiry_time 260
config igmp_snooping vlan Vlan_888 fast_leave disable report_suppression enable state disable
config igmp_snooping querier vlan Vlan_888 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3
config igmp_snooping data_driven_learning vlan Vlan_888 state enable aged_out disable expiry_time 260

# MLDSNP

config mld_snooping data_driven_learning max_learned_entry 128
config mld_snooping vlan default fast_done disable report_suppression enable state disable
config mld_snooping querier vlan default query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2
config mld_snooping data_driven_learning vlan default state enable aged_out disable expiry_time 260
config mld_snooping vlan Vlan_7 fast_done disable report_suppression enable state disable
config mld_snooping querier vlan Vlan_7 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2
config mld_snooping data_driven_learning vlan Vlan_7 state enable aged_out disable expiry_time 260
config mld_snooping vlan Vlan_254 fast_done disable report_suppression enable state disable
config mld_snooping querier vlan Vlan_254 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2
config mld_snooping data_driven_learning vlan Vlan_254 state enable aged_out disable expiry_time 260
config mld_snooping vlan Vlan_888 fast_done disable report_suppression enable state disable
config mld_snooping querier vlan Vlan_888 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2
config mld_snooping data_driven_learning vlan Vlan_888 state enable aged_out disable expiry_time 260

# ACCESS_AUTHENTICATION_CONTROL

config authen_login default method local
config authen_enable default method  local_enable
config authen application console login default
config authen application console enable default
config authen application telnet login default
config authen application telnet enable default
config authen application ssh login default
config authen application ssh enable default
config authen application http login default
config authen application http enable default
config authen parameter response_timeout 30
config authen parameter attempt 3
disable authen_policy
config accounting service network state disable
config accounting service shell state disable
config accounting service system state disable

# DHCP_LOCAL_RELAY

disable dhcp_local_relay

# AAA_LOCAL_ENABLE_PASSWORD

# AAA ADMIN PWD LIST
config admin local_enable



# AAA ADMIN PWD END

# DHCP_RELAY

disable dhcp_relay
config dhcp_relay hops 4 time 0
config dhcp_relay option_82 state disable
config dhcp_relay option_82 check disable
config dhcp_relay option_82 policy replace
config dhcp_relay option_82 remote_id default
config dhcp_relay option_60 state disable
config dhcp_relay option_61 state disable
config dhcp_relay option_60 default mode drop
config dhcp_relay option_61 default drop

# NDP

config ipv6 nd ns ipif System retrans_time 0

# RELAY6

config dhcpv6_relay hop_count  4

# ARP

config arp_aging time 30
config gratuitous_arp send ipif_status_up disable
config gratuitous_arp send dup_ip_detected disable
config gratuitous_arp learning disable

# ROUTE


# DNSR

disable dnsr
config dnsr primary nameserver 0.0.0.0
config dnsr secondary nameserver 0.0.0.0
disable dnsr cache
disable dnsr static

# PROUTE


# DHCP_SERVER

config dhcp ping_packets 2
config dhcp ping_timeout 100
disable dhcp_server

#-------------------------------------------------------------------
#             End of configuration file for DES-3528
#-------------------------------------------------------------------

disable dnsr
config dnsr primary nameserver 0.0.0.0
config dnsr secondary nameserver 0.0.0.0
disable dnsr cache
disable dnsr static

# PROUTE


# DHCP_SERVER

config dhcp ping_packets 2
config dhcp ping_timeout 100
disable dhcp_server

#-------------------------------------------------------------------
#             End of configuration file for DES-3528
#-------------------------------------------------------------------