#-------------------------------------------------------------------
# DES-3028 Configuration
#
# Firmware: Build 2.30.B04
# Copyright(C) 2008 D-Link Corporation. All rights reserved.
#-------------------------------------------------------------------


# BASIC

config serial_port baud_rate 9600 auto_logout 10_minutes
# ACCOUNT LIST

create account admin admin

# ACCOUNT END

# PASSWORD ENCRYPTION
disable password encryption
config terminal_line default
enable clipaging
disable command logging

# STORM

config traffic trap none
config traffic control 1-28 broadcast disable multicast disable unicast disable action drop threshold 64 countdown 0 time_interval 5

# LOOP_DETECT

disable loopdetect
config loopdetect recover_timer 60
config loopdetect interval 10
config loopdetect port 1-28 state disabled

# QOS

config scheduling_mechanism strict
config scheduling 0 weight 1
config scheduling 1 weight 2
config scheduling 2 weight 4
config scheduling 3 weight 8
config 802.1p user_priority 0 1
config 802.1p user_priority 1 0
config 802.1p user_priority 2 0
config 802.1p user_priority 3 1
config 802.1p user_priority 4 2
config 802.1p user_priority 5 2
config 802.1p user_priority 6 3
config 802.1p user_priority 7 3
config cos tos value 0 class 0
config cos tos value 1 class 0
config cos tos value 2 class 0
config cos tos value 3 class 0
config cos tos value 4 class 0
config cos tos value 5 class 0
config cos tos value 6 class 0
config cos tos value 7 class 0
config dscp_mapping dscp_value 0 class 0
config dscp_mapping dscp_value 1 class 0
config dscp_mapping dscp_value 2 class 0
config dscp_mapping dscp_value 3 class 0
config dscp_mapping dscp_value 4 class 0
config dscp_mapping dscp_value 5 class 0
config dscp_mapping dscp_value 6 class 0
config dscp_mapping dscp_value 7 class 0
config dscp_mapping dscp_value 8 class 0
config dscp_mapping dscp_value 9 class 0
config dscp_mapping dscp_value 10 class 0
config dscp_mapping dscp_value 11 class 0
config dscp_mapping dscp_value 12 class 0
config dscp_mapping dscp_value 13 class 0
config dscp_mapping dscp_value 14 class 0
config dscp_mapping dscp_value 15 class 0
config dscp_mapping dscp_value 16 class 0
config dscp_mapping dscp_value 17 class 0
config dscp_mapping dscp_value 18 class 0
config dscp_mapping dscp_value 19 class 0
config dscp_mapping dscp_value 20 class 0
config dscp_mapping dscp_value 21 class 0
config dscp_mapping dscp_value 22 class 0
config dscp_mapping dscp_value 23 class 0
config dscp_mapping dscp_value 24 class 0
config dscp_mapping dscp_value 25 class 0
config dscp_mapping dscp_value 26 class 0
config dscp_mapping dscp_value 27 class 0
config dscp_mapping dscp_value 28 class 0
config dscp_mapping dscp_value 29 class 0
config dscp_mapping dscp_value 30 class 0
config dscp_mapping dscp_value 31 class 0
config dscp_mapping dscp_value 32 class 0
config dscp_mapping dscp_value 33 class 0
config dscp_mapping dscp_value 34 class 0
config dscp_mapping dscp_value 35 class 0
config dscp_mapping dscp_value 36 class 0
config dscp_mapping dscp_value 37 class 0
config dscp_mapping dscp_value 38 class 0
config dscp_mapping dscp_value 39 class 0
config dscp_mapping dscp_value 40 class 0
config dscp_mapping dscp_value 41 class 0
config dscp_mapping dscp_value 42 class 0
config dscp_mapping dscp_value 43 class 0
config dscp_mapping dscp_value 44 class 0
config dscp_mapping dscp_value 45 class 0
config dscp_mapping dscp_value 46 class 0
config dscp_mapping dscp_value 47 class 0
config dscp_mapping dscp_value 48 class 0
config dscp_mapping dscp_value 49 class 0
config dscp_mapping dscp_value 50 class 0
config dscp_mapping dscp_value 51 class 0
config dscp_mapping dscp_value 52 class 0
config dscp_mapping dscp_value 53 class 0
config dscp_mapping dscp_value 54 class 0
config dscp_mapping dscp_value 55 class 0
config dscp_mapping dscp_value 56 class 0
config dscp_mapping dscp_value 57 class 0
config dscp_mapping dscp_value 58 class 0
config dscp_mapping dscp_value 59 class 0
config dscp_mapping dscp_value 60 class 0
config dscp_mapping dscp_value 61 class 0
config dscp_mapping dscp_value 62 class 0
config dscp_mapping dscp_value 63 class 0
config 802.1p default_priority 1-28 0
config cos mapping port 1-28 ethernet 802.1p

# MIRROR

disable mirror
config mirror port 1 delete source ports 1 both

# BANDWIDTH

config bandwidth_control 1-28 rx_rate no_limit tx_rate no_limit

# SYSLOG

disable syslog
config log_save_timing on_demand

# TRAF-SEGMENTATION

config traffic_segmentation 1-28 forward_list 1-28

# PACKET_FROM_CPU

config mgmt_pkt_priority default

# SSL

disable ssl
enable ssl ciphersuite RSA_with_RC4_128_MD5
enable ssl ciphersuite RSA_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite DHE_DSS_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5
config ssl cachetimeout 600

# PORT

config ports 1-28 speed auto flow_control disable state enable clear_description
config ports 1-28 learning enable
config ports 1-28 mdix auto
config ports 25-26 medium_type fiber speed auto flow_control disable state enable clear_description
config ports 25-26 medium_type fiber learning enable

# TIME_RANGE


# GM

config sim candidate
disable sim
config sim dp_interval 30
config sim hold_time 100

# MANAGEMENT

enable snmp traps
enable snmp authenticate traps
enable snmp linkchange_traps
config snmp linkchange_traps ports all enable
config snmp coldstart_traps enable
config snmp warmstart_traps enable
disable rmon

# SNMPv3

delete snmp community public
delete snmp community private
delete snmp user initial
delete snmp group initial
delete snmp view restricted all
delete snmp view CommunityView all
delete snmp group public
delete snmp group private
delete snmp group ReadGroup
delete snmp group WriteGroup
config snmp engineID 800000ab0300219191cab9
create snmp view restricted 1.3.6.1.2.1.1 view_type included
create snmp view restricted 1.3.6.1.2.1.11 view_type included
create snmp view restricted 1.3.6.1.6.3.10.2.1 view_type included
create snmp view restricted 1.3.6.1.6.3.11.2.1 view_type included
create snmp view restricted 1.3.6.1.6.3.15.1.1 view_type included
create snmp view CommunityView 1 view_type included
create snmp view CommunityView 1.3.6.1.6.3 view_type excluded
create snmp view CommunityView 1.3.6.1.6.3.1 view_type included
create snmp group public v1 read_view CommunityView notify_view CommunityView
create snmp group public v2c read_view CommunityView notify_view CommunityView
create snmp group initial v3 noauth_nopriv read_view restricted notify_view restricted
create snmp group private v1 read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group private v2c read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group ReadGroup v1 read_view CommunityView notify_view CommunityView
create snmp group ReadGroup v2c read_view CommunityView notify_view CommunityView
create snmp group WriteGroup v1 read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group WriteGroup v2c read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp community private view CommunityView read_write
create snmp community public view CommunityView read_only
create snmp user initial initial

# VLAN

disable asymmetric_vlan
disable qinq
config vlan default delete 1-28
config vlan default advertisement enable
create vlan vlan_31 tag 31
config vlan vlan_31 add tagged 25
config vlan vlan_31 add untagged 1-4
create vlan vlan_64 tag 64
config vlan vlan_64 add tagged 13,25
config vlan vlan_64 add untagged 5-12,14-20
create vlan office tag 4092
config vlan office add tagged 25
config vlan office add untagged 21-24,26-28
create vlan switch tag 4094
config vlan switch add tagged 25
disable gvrp
config gvrp 1-4 state disable ingress_checking enable acceptable_frame admit_all pvid 31
config gvrp 5-12,14-20 state disable ingress_checking enable acceptable_frame admit_all pvid 64
config gvrp 13 state disable ingress_checking enable acceptable_frame admit_all pvid 999
config gvrp 21-24,26-28 state disable ingress_checking enable acceptable_frame admit_all pvid 4092
config gvrp 25 state disable ingress_checking enable acceptable_frame admit_all pvid 1

# 8021X

disable 802.1x
config 802.1x auth_protocol radius_eap
config radius parameter timeout 5 retransmit 2
config 802.1x capability ports 1-28 none
config 802.1x auth_parameter ports 1-28 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable

# PORT_LOCK

disable port_security trap_log
config port_security ports 1-28 admin_state disable max_learning_addr 1 lock_address_mode DeleteOnTimeout

# PPPOE

config pppoe circuit_id_insertion state disable
config pppoe circuit_id_insertion ports 1-28 state enable circuit_id ip

# FDB

config fdb aging_time 300
config multicast port_filtering_mode all filter_unregistered_groups
config multicast port_filtering_mode 1-24,26-28 forward_unregistered_groups

# MAC_ADDRESS_TABLE_NOTIFICATION

config mac_notification interval 1 historysize 1
disable mac_notification
config mac_notification ports 1-28 disable

# STP

disable stp
config stp version rstp
config stp maxage 20 maxhops 20 forwarddelay 15 txholdcount 6 fbpdu enable hellotime 2 lbd enable lbd_recover_timer 60
config stp priority 32768 instance_id 0
config stp mst_config_id name 00:21:91:91:CA:B9 revision_level 0
config stp trap new_root enable topo_change enable
config stp ports 1-28 externalCost auto edge false p2p auto state enable lbd disable
config stp mst_ports 1-28 instance_id 0 internalCost auto priority 128
config stp ports 1-28 fbpdu enable
config stp ports 1-28 restricted_role false
config stp ports 1-28 restricted_tcn false

# MULTI FILTER

config max_mcast_group port 1-28 max_group 256

# SAFEGUARD_ENGINE

config safeguard_engine state enable utilization rising 90 falling 70 trap_log disable mode fuzzy

# BANNER_PROMP

config command_prompt default
config greeting_message default

# SSH

config ssh algorithm 3DES enable
config ssh algorithm AES128 enable
config ssh algorithm AES192 enable
config ssh algorithm AES256 enable
config ssh algorithm arcfour enable
config ssh algorithm blowfish enable
config ssh algorithm cast128 enable
config ssh algorithm twofish128 enable
config ssh algorithm twofish192 enable
config ssh algorithm twofish256 enable
config ssh algorithm MD5 enable
config ssh algorithm SHA1 enable
config ssh algorithm RSA enable
config ssh algorithm DSA enable
config ssh authmode password enable
config ssh authmode publickey enable
config ssh authmode hostbased enable
config ssh server maxsession 8
config ssh server contimeout 120
config ssh server authfail 2
config ssh server rekey never
config ssh user admin authmode password
enable ssh

# SNOOP

enable igmp_snooping
config igmp_snooping data_driven_learning max_learned_entry 56
enable igmp_snooping multicast_vlan
create igmp_snooping multicast_vlan iptv 999
config igmp_snooping multicast_vlan iptv state enable
config igmp_snooping multicast_vlan iptv replace_source_ip 192.168.64.251
config igmp_snooping multicast_vlan iptv add member_port 1-24
config igmp_snooping multicast_vlan iptv add source_port 25
config igmp_snooping vlan_name default host_timeout 260 router_timeout 260 leave_timer 2 state disable fast_leave disable
config igmp_snooping data_driven_learning vlan_name default aged_out disable
config igmp_snooping querier all query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable
config igmp_snooping vlan_name vlan_31 host_timeout 260 router_timeout 260 leave_timer 2 state disable fast_leave disable
config igmp_snooping data_driven_learning vlan_name vlan_31 aged_out disable
config igmp_snooping vlan_name vlan_64 host_timeout 260 router_timeout 260 leave_timer 2 state disable fast_leave disable
config igmp_snooping data_driven_learning vlan_name vlan_64 aged_out disable
config igmp_snooping vlan_name iptv host_timeout 260 router_timeout 260 leave_timer 2 fast_leave disable
config igmp_snooping data_driven_learning vlan_name iptv aged_out disable
config igmp_snooping vlan_name office host_timeout 260 router_timeout 260 leave_timer 2 state disable fast_leave disable
config igmp_snooping data_driven_learning vlan_name office aged_out disable
config igmp_snooping vlan_name switch host_timeout 260 router_timeout 260 leave_timer 2 state disable fast_leave disable
config igmp_snooping data_driven_learning vlan_name switch aged_out disable
config igmp access_authentication port 1-28 state disable
config cpu_filter l3_control_pkt 1-28 all state disable

# VLAN_TRUNK

disable vlan_trunk

# SMTP

disable smtp

# ACL

disable cpu_interface_filtering

# SNTP

enable sntp
config time_zone operator + hour 2 min 0
config sntp primary 192.168.64.5 secondary 0.0.0.0 poll-interval 720
config dst disable

# DOS_PREVENTION

disable dos_prevention trap_log
config dos_prevention dos_type land_attack action drop state enable
config dos_prevention dos_type blat_attack action drop state enable
config dos_prevention dos_type smurf_attack action drop state enable
config dos_prevention dos_type tcp_null_scan action drop state enable
config dos_prevention dos_type tcp_xmascan action drop state enable
config dos_prevention dos_type tcp_synfin action drop state enable
config dos_prevention dos_type tcp_syn_srcport_less_1024 action drop state disable

# LACP

config lacp_port 1-28 mode passive
config link_aggregation algorithm mac_source

# ERPS

config erps log disable
disable erps

# ADDRBIND

disable address_binding dhcp_snoop
disable address_binding trap_log
disable address_binding arp_inspection
config address_binding ip_mac ports 1-28 state disable allow_zeroip disable forward_dhcppkt enable
config address_binding ip_mac ports 1-28 mode arp stop_learning_threshold 500
config address_binding dhcp_snoop max_entry ports 1-28 limit 5

# ARPSPOOF


# IP

config ipif System vlan switch ipaddress 172.19.1.180/24 state enable
config ipif System dhcp_option12 state disable
disable telnet
enable web 80
disable autoconfig

# LLDP

disable lldp
config lldp message_tx_interval 30
config lldp tx_delay 2
config lldp message_tx_hold_multiplier 4
config lldp reinit_delay 2
config lldp notification_interval 5
config lldp ports 1-28 notification disable
config lldp ports 1-28 admin_status tx_and_rx

# MLDSNP


# ARP

config arp_aging time 20
config gratuitous_arp send ipif_status_up enable
config gratuitous_arp send dup_ip_detected enable
config gratuitous_arp learning enable

# AAA

config authen_login default method local
config authen_enable default method local_enable
config authen application console login default
config authen application console enable default
config authen application telnet login default
config authen application telnet enable default
config authen application ssh login default
config authen application ssh enable default
config authen application http login default
config authen application http enable default
config authen parameter response_timeout 30
config authen parameter attempt 3
disable authen_policy
config admin local_enable




# DHCP_RELAY

disable dhcp_relay
config dhcp_relay hops 4 time 0
config dhcp_relay option_82 state disable
config dhcp_relay option_82 check disable
config dhcp_relay option_82 policy replace
config dhcp_relay option_82 remote_id default

# DHCP_LOCAL_RELAY

disable dhcp_local_relay

# FIRM

config configuration trap save disable upload disable download disable

# ROUTE

create iproute default 172.19.1.1 1

#-------------------------------------------------------------------
# End of configuration file for DES-3028
#------------------------------------------------------------------

DGS-3627G Gigabit Ethernet Switch
Command Line Interface

Firmware: Build 2.81.B03
Copyright(C) 2010 D-Link Corporation. All rights reserved.

DGS-3627G:admin#show config
Command: show config
Next possible completions:
active boot_up <drive_id> <pathname 64>

DGS-3627G:admin#show config active
Command: show config active

#-------------------------------------------------------------------------------
# DGS-3627G Gigabit Ethernet Switch
# Configuration
#
# Firmware: Build 2.81.B03
# Copyright(C) 2010 D-Link Corporation. All rights reserved.
#-------------------------------------------------------------------------------


# STACK

config stacking force_master_role state disable

# DOUBLE_VLAN

disable double_vlan

# BASIC

# ACCOUNT LIST
create account admin admin


create account admin root

create account admin serega

create account admin spector

# ACCOUNT END
# PASSWORD ENCRYPTION
disable password encryption
config serial_port auto_logout 10_minutes
disable telnet
enable web 80
enable clipaging

# DEBUG

debug config state enable
debug config error_reboot enable

# STORM

config traffic control auto_recover_time 0
config traffic trap none
config traffic control 1-27 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5

# LOOP_DETECT

enable loopdetect
config loopdetect recover_timer 300 interval 10 mode port-based
config loopdetect trap loop_detected
config loopdetect ports 1-19,21-27 state enabled

# GM

config sim commander
enable sim
config sim dp_interval 30
config sim hold_time 100
config sim commander group_name globus

# GM_H


# SYSLOG

disable syslog
config system_severity log information
config system_severity trap information
config log_save_timing on_demand

# QOS

enable hol_prevention
config 802.1p default_priority 1-27 0
config bandwidth_control 1-27 rx_rate no_limit tx_rate no_limit
config per_queue bandwidth_control ports 1-27 0 min_rate no_limit max_rate no_ limit
config per_queue bandwidth_control ports 1-27 1 min_rate no_limit max_rate no_ limit
config per_queue bandwidth_control ports 1-27 2 min_rate no_limit max_rate no_ limit
config per_queue bandwidth_control ports 1-27 3 min_rate no_limit max_rate no_ limit
config per_queue bandwidth_control ports 1-27 4 min_rate no_limit max_rate no_ limit
config per_queue bandwidth_control ports 1-27 5 min_rate no_limit max_rate no_ limit
config per_queue bandwidth_control ports 1-27 6 min_rate no_limit max_rate no_ limit
config scheduling_mechanism ports 1-27 strict
config scheduling ports 1-27 0 max_packet 1
config scheduling ports 1-27 1 max_packet 2
config scheduling ports 1-27 2 max_packet 3
config scheduling ports 1-27 3 max_packet 4
config scheduling ports 1-27 4 max_packet 5
config scheduling ports 1-27 5 max_packet 6
config scheduling ports 1-27 6 max_packet 7
config 802.1p user_priority ports 1-27 0 2
config 802.1p user_priority ports 1-27 1 0
config 802.1p user_priority ports 1-27 2 1
config 802.1p user_priority ports 1-27 3 3
config 802.1p user_priority ports 1-27 4 4
config 802.1p user_priority ports 1-27 5 5
config 802.1p user_priority ports 1-27 6 6
config 802.1p user_priority ports 1-27 7 6

# MIRROR

disable mirror

# TRAF-SEGMENTATION

config traffic_segmentation 1-27 forward_list all

# SSL

disable ssl
enable ssl ciphersuite RSA_with_RC4_128_MD5
enable ssl ciphersuite RSA_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite DHE_DSS_with_3DES_EDE_CBC_SHA
enable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5
config ssl cachetimeout 600

# PORT

disable jumbo_frame
config ports 1 speed auto capability_advertised 1000_full flow_control disable l earning enable state enable description Lugovaya 6
config ports 2 speed auto capability_advertised 1000_full flow_control disable l earning enable state enable description Donskay 6
config ports 3 speed auto capability_advertised 1000_full flow_control disable l earning enable state enable description Ketckemetskaya 170/89
config ports 4 speed auto capability_advertised 1000_full flow_control disable l earning enable state enable description Gagarina
config ports 5 speed auto capability_advertised 1000_full flow_control disable l earning enable state enable description OFFICE
config ports 6 speed auto capability_advertised 1000_full flow_control disable l earning enable state enable description Sevastopolskaya 24
config ports 7 speed auto capability_advertised 1000_full flow_control disable l earning enable state enable description Donskay 41
config ports 8 speed auto capability_advertised 1000_full flow_control disable l earning enable state enable description Prospect Pobedy 107
config ports 9 speed auto capability_advertised 1000_full flow_control disable l earning enable state enable description Sovhoznaya 21
config ports 10 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description Avtomobilistov_1
config ports 11 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description Krelcom
config ports 12-13,17-19 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description null
config ports 14 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description pavlenko_11
config ports 15 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description Jelyabova_1
config ports 16 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description Titova/Peregonec
config ports 20 speed auto capability_advertised 1000_full flow_control disable learning enable state enable description Ketckemetskaya 186
config ports 21 medium_type copper speed auto capability_advertised 10_half 10_f ull 100_half 100_full 1000_full flow_control disable learning enable state enabl e description VPN
config ports 21-23 medium_type fiber speed auto capability_advertised 1000_full flow_control disable learning enable state enable description -
config ports 22 medium_type copper speed auto capability_advertised 10_half 10_f ull 100_half 100_full 1000_full flow_control disable learning enable state enabl e description midalware
config ports 23 medium_type copper speed auto capability_advertised 10_half 10_f ull 100_half 100_full 1000_full flow_control disable learning enable state enabl e description strimer
config ports 24 medium_type copper speed auto capability_advertised 10_half 10_f ull 100_half 100_full 1000_full flow_control disable learning enable state enabl e description MYSQL
config ports 24 medium_type fiber speed auto capability_advertised 1000_full flo w_control disable learning enable state enable description null
config ports 25 speed auto flow_control disable learning enable state enable de scription Core-1
config ports 26-27 speed auto flow_control disable learning enable state enable

# OAM


# DDM

config ddm trap disable
config ddm log enable
config ddm ports 1-24 state enable shutdown alarm

# PORT_LOCK

config port_security ports 1-27 admin_state disable max_learning_addr 1 lock_add ress_mode DeleteOnReset

# SNMPv3

delete snmp community public
delete snmp community private
delete snmp user initial
delete snmp group initial
delete snmp group ReadGroup
delete snmp group WriteGroup
delete snmp view restricted all
delete snmp view CommunityView all
config snmp engineID 800000ab03001e58d34100
create snmp view restricted 1.3.6.1.2.1.1 view_type included
create snmp view restricted 1.3.6.1.2.1.11 view_type included
create snmp view restricted 1.3.6.1.6.3.10.2.1 view_type included
create snmp view restricted 1.3.6.1.6.3.11.2.1 view_type included
create snmp view restricted 1.3.6.1.6.3.15.1.1 view_type included
create snmp view CommunityView 1 view_type included
create snmp view CommunityView 1.3.6.1.6.3 view_type excluded
create snmp view CommunityView 1.3.6.1.6.3.1 view_type included
create snmp group public v1 read_view CommunityView notify_view CommunityView
create snmp group public v2c read_view CommunityView notify_view CommunityView
create snmp group initial v3 noauth_nopriv read_view restricted notify_view res tricted
create snmp group private v1 read_view CommunityView write_view CommunityView no tify_view CommunityView
create snmp group private v2c read_view CommunityView write_view CommunityView n otify_view CommunityView
create snmp group ReadGroup v1 read_view CommunityView notify_view CommunityView
create snmp group ReadGroup v2c read_view CommunityView notify_view CommunityVie w
create snmp group WriteGroup v1 read_view CommunityView write_view CommunityView notify_view CommunityView
create snmp group WriteGroup v2c read_view CommunityView write_view CommunityVie w notify_view CommunityView
create snmp group privatecerfgblfhfc v1 read_view CommunityView write_view Commu nityView notify_view CommunityView
create snmp group privatecerfgblfhfc v2c read_view CommunityView write_view Comm unityView notify_view CommunityView
create snmp community privatecerfgblfhfc view CommunityView read_write
create snmp community public view CommunityView read_only
create snmp user initial initial

# MANAGEMENT

enable snmp traps
enable snmp authenticate_traps
enable snmp
enable snmp linkchange_traps
config snmp system_name Core
config snmp system_location Core
config snmp system_contact 701-576
disable rmon
config snmp linkchange_traps ports 1-27 enable

# VLAN

enable pvid auto_assign
config vlan default delete 1-27
config vlan default advertisement enable
create vlan vlan_2 tag 2
config vlan vlan_2 add tagged 4,25 advertisement disable
create vlan vlan_3 tag 3
config vlan vlan_3 add tagged 4 advertisement disable
create vlan vlan_5 tag 5
config vlan vlan_5 add tagged 25 advertisement disable
create vlan vlan_6 tag 6
config vlan vlan_6 add tagged 2 advertisement disable
create vlan vlan_7 tag 7
config vlan vlan_7 add tagged 25 advertisement disable
create vlan vlan_11 tag 11
config vlan vlan_11 add tagged 25 advertisement disable
create vlan vlan_12 tag 12
config vlan vlan_12 add tagged 26 advertisement disable
create vlan vlan_13 tag 13
config vlan vlan_13 add tagged 15,25 advertisement disable
create vlan vlan_14 tag 14
config vlan vlan_14 add tagged 4 advertisement disable
create vlan vlan_15 tag 15
config vlan vlan_15 add tagged 25 advertisement disable
create vlan vlan_18 tag 18
config vlan vlan_18 add tagged 14 advertisement disable
create vlan vlan_20 tag 20
config vlan vlan_20 add tagged 25 advertisement disable
create vlan vlan_21 tag 21
config vlan vlan_21 add tagged 25 advertisement disable
create vlan vlan_25 tag 25
config vlan vlan_25 add tagged 25 advertisement disable
create vlan vlan_31 tag 31
config vlan vlan_31 add tagged 5 advertisement disable
create vlan vlan_39 tag 39
config vlan vlan_39 add tagged 25 advertisement disable
create vlan vlan_41 tag 41
config vlan vlan_41 add tagged 7 advertisement disable
create vlan vlan_42 tag 42
config vlan vlan_42 add tagged 10 advertisement disable
create vlan vlan_57 tag 57
config vlan vlan_57 add tagged 3 advertisement disable
create vlan vlan_60 tag 60
config vlan vlan_60 add tagged 25 advertisement disable
create vlan vlan_61 tag 61
config vlan vlan_61 add tagged 3 advertisement disable
create vlan vlan_64 tag 64
config vlan vlan_64 add tagged 1-21,23-27
config vlan vlan_64 add untagged 22 advertisement disable
create vlan vlan_65 tag 65
config vlan vlan_65 add tagged 1,8,20,25-26 advertisement disable
create vlan vlan_66 tag 66
config vlan vlan_66 add tagged 3,16,20,25-26 advertisement disable
create vlan vlan_67 tag 67
config vlan vlan_67 add tagged 1,8 advertisement disable
create vlan vlan_79 tag 79
config vlan vlan_79 add tagged 3 advertisement disable
create vlan vlan_90 tag 90
config vlan vlan_90 add tagged 3,25 advertisement disable
create vlan vlan_91 tag 91
config vlan vlan_91 add tagged 1,9,25 advertisement disable
create vlan vlan_96 tag 96
config vlan vlan_96 add tagged 3 advertisement disable
create vlan vlan_150 tag 150
config vlan vlan_150 add tagged 25 advertisement disable
create vlan ua-ix tag 163
config vlan ua-ix add tagged 11,21 advertisement disable
create vlan vlan_200 tag 200
config vlan vlan_200 add tagged 6,15,25-26
config vlan vlan_200 add untagged 18 advertisement disable
create vlan vlan_256 tag 256
config vlan vlan_256 add tagged 25 advertisement disable
create vlan krelcom tag 346
config vlan krelcom add tagged 5,11,21 advertisement disable
create vlan telephone tag 360
config vlan telephone add tagged 5,11 advertisement disable
create vlan 476 tag 476
config vlan 476 add tagged 5,16 advertisement disable
create vlan voip tag 998
config vlan voip add tagged 5 advertisement disable
create vlan iptv tag 999
config vlan iptv add tagged 1-27 advertisement disable
create vlan avtodor tag 3123
config vlan avtodor add tagged 3,5,20-21 advertisement disable
create vlan office tag 4092
config vlan office add tagged 5 advertisement disable
create vlan sklad tag 4093
config vlan sklad add tagged 26 advertisement disable
create vlan switch tag 4094
config vlan switch add tagged 1-27 advertisement disable
disable qinq
disable gvrp
disable vlan_trunk
config vlan_trunk ports 5,16 state enable
config gvrp 1-17,19-21,23-27 state disable ingress_checking enable acceptable_fr ame admit_all pvid 1
config gvrp 18 state disable ingress_checking enable acceptable_frame admit_all pvid 200
config gvrp 22 state disable ingress_checking enable acceptable_frame admit_all pvid 64

# PROTOCOL_VLAN


# QINQ


# SUBNETVLAN

config vlan_precedence port 1-27 mac_based_vlan

# SUPERVLAN


# RSPAN

disable rspan

# MEF


# 8021X

disable 802.1x
config 802.1x auth_mode port_based
config 802.1x auth_protocol radius_eap
config 802.1x fwd_pdu system disable
config 802.1x max_users 4000
config 802.1x authorization network radius enable
config 802.1x capability ports 1-27 none
config 802.1x auth_parameter ports 1-27 direction both port_control auto quiet_p eriod 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x auth_parameter ports 1-27 max_users 16

# guestvlan


# TR


# ACL

disable cpu_interface_filtering

# NLB


# LIMITED_MULTICAST_RANGE


# MULTICAST_VLAN


# FDB

config fdb aging_time 300

# ADDRBIND

config address_binding ip_mac ports 1-27 forward_dhcppkt enable
disable address_binding dhcp_snoop
disable address_binding dhcp_snoop ipv6
disable address_binding nd_snoop
disable address_binding trap_log
config address_binding dhcp_snoop max_entry ports 1-27 limit no_limit

# DHCPV6_SNOOPING


# ND_SNOOPING


# DhcpServerScreening

config filter dhcp_server port all state disable
config filter dhcp_server illegal_server_log_suppress_duration 5min
config filter dhcp_server trap_log disable

# ARPSpoofingPrevention


# MAC_ADDRESS_TABLE_NOTIFICATION

disable mac_notification
config mac_notification interval 1 historysize 1
config mac_notification ports 1-27 disable

# STP

config stp version rstp
config stp maxage 20 maxhops 20 forwarddelay 15 txholdcount 3 fbpdu enable hello time 2 lbd enable lbd_recover_timer 60 nni_bpdu_addr dot1ad
config stp priority 32768 instance_id 0
config stp mst_config_id name 00:1E:58:D3:41:00 revision_level 0
disable stp
config stp ports 1-27 externalCost auto edge false p2p auto state enable restri cted_role false restricted_tcn false lbd disable
config stp mst_ports 1-27 instance_id 0 internalCost auto priority 128
config stp ports 1-27 fbpdu enable

# BPDU_TUNNEL

config bpdu_tunnel ports all type none
disable bpdu_tunnel

# BPDU_PROTECTION

config bpdu_protection ports 1-27 mode shutdown

# SAFEGUARD_ENGINE

config safeguard_engine state enable utilization rising 90 falling 60 trap_log e nable mode fuzzy

# BANNER_PROMP

config command_prompt default
config greeting_message default

# SSH

config ssh algorithm 3DES enable
config ssh algorithm AES128 enable
config ssh algorithm AES192 enable
config ssh algorithm AES256 enable
config ssh algorithm arcfour enable
config ssh algorithm blowfish enable
config ssh algorithm cast128 enable
config ssh algorithm twofish128 enable
config ssh algorithm twofish192 enable
config ssh algorithm twofish256 enable
config ssh algorithm MD5 enable
config ssh algorithm SHA1 enable
config ssh algorithm RSA enable
config ssh algorithm DSA enable
config ssh authmode password enable
config ssh authmode publickey enable
config ssh authmode hostbased enable
config ssh server maxsession 8
config ssh server contimeout 600
config ssh server authfail 2
config ssh server rekey never
config ssh server port 22
config ssh user admin authmode password
config ssh user root authmode password
config ssh user serega authmode password
config ssh user spector authmode password
enable ssh

# SERVER_PROFILE


# DNSRESOLVER

disable dns_resolver
config name_server timeout 3

# CMDLOG

disable command logging

# BCPING

enable broadcast_ping_reply

# SNTP

enable sntp
config time_zone operator + hour 2 min 0
config sntp primary 192.168.64.189 secondary 0.0.0.0 poll-interval 720
config dst disable

# LACP

config link_aggregation algorithm ip_source
config lacp_port 1-27 mode passive

# IP

config ipif_mac_mapping ipif System mac_offset 0
config ipif System ipaddress 192.168.64.251/24 vlan vlan_64
config ipif System dhcpv6_client disable
config ipif System ip_directed_broadcast disable
config ipif System proxy_arp disable local disable
config ipif_mac_mapping ipif iptv mac_offset 28
create ipif iptv 172.21.1.1/24 iptv state enable
config ipif iptv proxy_arp disable local disable
config ipif_mac_mapping ipif voip mac_offset 25
create ipif voip 172.22.1.1/24 voip state enable
config ipif voip proxy_arp disable local disable
config ipif_mac_mapping ipif sklad mac_offset 29
create ipif sklad 192.168.1.254/24 sklad state enable
config ipif sklad proxy_arp disable local disable
config ipif_mac_mapping ipif office mac_offset 35
create ipif office 172.20.254.1/24 office state enable
config ipif office proxy_arp disable local disable
config ipif_mac_mapping ipif switch mac_offset 24
create ipif switch 172.19.1.1/24 switch state enable
config ipif switch proxy_arp disable local disable
config ipif_mac_mapping ipif local_2 mac_offset 14
create ipif local_2 172.20.2.1/24 vlan_2 state enable
config ipif local_2 proxy_arp disable local disable
config ipif_mac_mapping ipif local_3 mac_offset 15
create ipif local_3 172.20.3.1/24 vlan_3 state enable
config ipif local_3 proxy_arp disable local disable
config ipif_mac_mapping ipif local_4 mac_offset 7
create ipif local_4 172.20.4.1/24 vlan_256 state enable
config ipif local_4 proxy_arp disable local disable
config ipif_mac_mapping ipif local_5 mac_offset 8
create ipif local_5 172.20.5.1/24 vlan_5 state enable
config ipif local_5 proxy_arp disable local disable
config ipif_mac_mapping ipif local_6 mac_offset 23
create ipif local_6 172.20.6.1/24 vlan_6 state enable
config ipif local_6 proxy_arp disable local disable
config ipif_mac_mapping ipif local_7 mac_offset 10
create ipif local_7 172.20.7.1/24 vlan_7 state enable
config ipif local_7 proxy_arp disable local disable
config ipif_mac_mapping ipif local_11 mac_offset 12
create ipif local_11 172.20.11.1/24 vlan_11 state enable
config ipif local_11 proxy_arp disable local disable
config ipif_mac_mapping ipif local_12 mac_offset 27
create ipif local_12 172.20.12.1/24 vlan_12 state enable
config ipif local_12 proxy_arp disable local disable
config ipif_mac_mapping ipif local_13 mac_offset 11
create ipif local_13 172.20.13.1/24 vlan_13 state enable
config ipif local_13 proxy_arp disable local disable
config ipif_mac_mapping ipif local_14 mac_offset 22
create ipif local_14 172.20.14.1/24 vlan_14 state enable
config ipif local_14 proxy_arp disable local disable
config ipif_mac_mapping ipif local_15 mac_offset 9
create ipif local_15 172.20.15.1/24 vlan_15 state enable
config ipif local_15 proxy_arp disable local disable
config ipif_mac_mapping ipif local_18 mac_offset 30
create ipif local_18 172.20.18.1/24 vlan_18 state enable
config ipif local_18 proxy_arp disable local disable
config ipif_mac_mapping ipif local_20 mac_offset 21
create ipif local_20 172.20.20.1/24 vlan_20 state enable
config ipif local_20 proxy_arp disable local disable
config ipif_mac_mapping ipif local_21 mac_offset 13
create ipif local_21 172.20.21.1/24 vlan_21 state enable
config ipif local_21 proxy_arp disable local disable
config ipif_mac_mapping ipif local_25 mac_offset 26
create ipif local_25 172.20.25.1/24 vlan_25 state enable
config ipif local_25 proxy_arp disable local disable
config ipif_mac_mapping ipif local_31 mac_offset 32
create ipif local_31 172.20.31.1/24 vlan_31 state enable
config ipif local_31 proxy_arp disable local disable
config ipif_mac_mapping ipif local_39 mac_offset 34
create ipif local_39 172.20.39.1/24 vlan_39 state enable
config ipif local_39 proxy_arp disable local disable
config ipif_mac_mapping ipif local_41 mac_offset 19
create ipif local_41 172.20.41.1/24 vlan_41 state enable
config ipif local_41 proxy_arp disable local disable
config ipif_mac_mapping ipif local_42 mac_offset 20
create ipif local_42 172.20.42.1/24 vlan_42 state enable
config ipif local_42 proxy_arp disable local disable
config ipif_mac_mapping ipif local_57 mac_offset 31
create ipif local_57 172.20.57.1/24 vlan_57 state enable
config ipif local_57 proxy_arp disable local disable
config ipif_mac_mapping ipif local_60 mac_offset 17
create ipif local_60 172.20.60.1/24 vlan_60 state enable
config ipif local_60 proxy_arp disable local disable
config ipif_mac_mapping ipif local_61 mac_offset 18
create ipif local_61 172.20.61.1/24 vlan_61 state enable
config ipif local_61 proxy_arp disable local disable
config ipif_mac_mapping ipif local_65 mac_offset 1
create ipif local_65 192.168.65.1/24 vlan_65 state enable
config ipif local_65 proxy_arp disable local disable
config ipif_mac_mapping ipif local_66 mac_offset 2
create ipif local_66 192.168.66.1/24 vlan_66 state enable
config ipif local_66 proxy_arp disable local disable
config ipif_mac_mapping ipif local_67 mac_offset 3
create ipif local_67 192.168.67.1/24 vlan_67 state enable
config ipif local_67 proxy_arp disable local disable
config ipif_mac_mapping ipif local_90 mac_offset 4
create ipif local_90 192.168.90.1/24 vlan_90 state enable
config ipif local_90 proxy_arp disable local disable
config ipif_mac_mapping ipif local_91 mac_offset 5
create ipif local_91 192.168.91.1/24 vlan_91 state enable
config ipif local_91 proxy_arp disable local disable
config ipif_mac_mapping ipif local_96 mac_offset 33
create ipif local_96 172.20.96.1/24 vlan_96 state enable
config ipif local_96 proxy_arp disable local disable
config ipif_mac_mapping ipif local_150 mac_offset 6
create ipif local_150 192.168.150.1/24 vlan_150 state enable
config ipif local_150 proxy_arp disable local disable
config ipif_mac_mapping ipif local_200 mac_offset 16
create ipif local_200 192.168.200.1/24 vlan_200 state enable
config ipif local_200 proxy_arp disable local disable
config ipif iptv ip_mtu 1500
config ipif voip ip_mtu 1500
config ipif sklad ip_mtu 1500
config ipif System ip_mtu 1500
config ipif office ip_mtu 1500
config ipif switch ip_mtu 1500
config ipif local_2 ip_mtu 1500
config ipif local_3 ip_mtu 1500
config ipif local_4 ip_mtu 1500
config ipif local_5 ip_mtu 1500
config ipif local_6 ip_mtu 1500
config ipif local_7 ip_mtu 1500
config ipif local_11 ip_mtu 1500
config ipif local_12 ip_mtu 1500
config ipif local_13 ip_mtu 1500
config ipif local_14 ip_mtu 1500
config ipif local_15 ip_mtu 1500
config ipif local_18 ip_mtu 1500
config ipif local_20 ip_mtu 1500
config ipif local_21 ip_mtu 1500
config ipif local_25 ip_mtu 1500
config ipif local_31 ip_mtu 1500
config ipif local_39 ip_mtu 1500
config ipif local_41 ip_mtu 1500
config ipif local_42 ip_mtu 1500
config ipif local_57 ip_mtu 1500
config ipif local_60 ip_mtu 1500
config ipif local_61 ip_mtu 1500
config ipif local_65 ip_mtu 1500
config ipif local_66 ip_mtu 1500
config ipif local_67 ip_mtu 1500
config ipif local_90 ip_mtu 1500
config ipif local_91 ip_mtu 1500
config ipif local_96 ip_mtu 1500
config ipif local_150 ip_mtu 1500
config ipif local_200 ip_mtu 1500
config ipif iptv dhcpv6_client disable
config ipif voip dhcpv6_client disable
config ipif sklad dhcpv6_client disable
config ipif System dhcpv6_client disable
config ipif office dhcpv6_client disable
config ipif switch dhcpv6_client disable
config ipif local_2 dhcpv6_client disable
config ipif local_3 dhcpv6_client disable
config ipif local_4 dhcpv6_client disable
config ipif local_5 dhcpv6_client disable
config ipif local_6 dhcpv6_client disable
config ipif local_7 dhcpv6_client disable
config ipif local_11 dhcpv6_client disable
config ipif local_12 dhcpv6_client disable
config ipif local_13 dhcpv6_client disable
config ipif local_14 dhcpv6_client disable
config ipif local_15 dhcpv6_client disable
config ipif local_18 dhcpv6_client disable
config ipif local_20 dhcpv6_client disable
config ipif local_21 dhcpv6_client disable
config ipif local_25 dhcpv6_client disable
config ipif local_31 dhcpv6_client disable
config ipif local_39 dhcpv6_client disable
config ipif local_41 dhcpv6_client disable
config ipif local_42 dhcpv6_client disable
config ipif local_57 dhcpv6_client disable
config ipif local_60 dhcpv6_client disable
config ipif local_61 dhcpv6_client disable
config ipif local_65 dhcpv6_client disable
config ipif local_66 dhcpv6_client disable
config ipif local_67 dhcpv6_client disable
config ipif local_90 dhcpv6_client disable
config ipif local_91 dhcpv6_client disable
config ipif local_96 dhcpv6_client disable
config ipif local_150 dhcpv6_client disable
config ipif local_200 dhcpv6_client disable
config ipif iptv ip_directed_broadcast disable
config ipif voip ip_directed_broadcast disable
config ipif sklad ip_directed_broadcast disable
config ipif System ip_directed_broadcast disable
config ipif office ip_directed_broadcast disable
config ipif switch ip_directed_broadcast disable
config ipif local_2 ip_directed_broadcast disable
config ipif local_3 ip_directed_broadcast disable
config ipif local_4 ip_directed_broadcast disable
config ipif local_5 ip_directed_broadcast disable
config ipif local_6 ip_directed_broadcast disable
config ipif local_7 ip_directed_broadcast disable
config ipif local_11 ip_directed_broadcast disable
config ipif local_12 ip_directed_broadcast disable
config ipif local_13 ip_directed_broadcast disable
config ipif local_14 ip_directed_broadcast disable
config ipif local_15 ip_directed_broadcast disable
config ipif local_18 ip_directed_broadcast disable
config ipif local_20 ip_directed_broadcast disable
config ipif local_21 ip_directed_broadcast disable
config ipif local_25 ip_directed_broadcast disable
config ipif local_31 ip_directed_broadcast disable
config ipif local_39 ip_directed_broadcast disable
config ipif local_41 ip_directed_broadcast disable
config ipif local_42 ip_directed_broadcast disable
config ipif local_57 ip_directed_broadcast disable
config ipif local_60 ip_directed_broadcast disable
config ipif local_61 ip_directed_broadcast disable
config ipif local_65 ip_directed_broadcast disable
config ipif local_66 ip_directed_broadcast disable
config ipif local_67 ip_directed_broadcast disable
config ipif local_90 ip_directed_broadcast disable
config ipif local_91 ip_directed_broadcast disable
config ipif local_96 ip_directed_broadcast disable
config ipif local_150 ip_directed_broadcast disable
config ipif local_200 ip_directed_broadcast disable
disable autoconfig

# ip_tunnel


# ERPS

disable erps
config erps log disable
config erps trap disable

# DHCP_SERVER

config dhcp ping_packets 2
config dhcp ping_timeout 500
disable dhcp_server

# WAC

config wac switch_http_port 80
config wac method radius
config wac authorization attributes local enable
config wac authorization attributes radius enable
disable wac
config wac ports 1-27 aging_time 1440 idle_time infinite block_time 60

# JWAC

config jwac switch_http_port 80
config jwac clear_quarantine_server_url
config jwac radius_protocol pap
disable jwac quarantine_server_monitor
config jwac quarantine_server_error_timeout 60
enable jwac forcible_logout
enable jwac udp_filtering
enable jwac redirect
config jwac redirect destination quarantine_server delay_time 1
disable jwac
config jwac authenticate_page english
config jwac authorization attributes radius enable
config jwac authorization attributes local enable
config jwac ports 1-27 auth_mode host_based max_authenticating_host 50 aging_tim e 1440 idle_time infinite block_time 60

# SFLOW

# LLDP

disable lldp
config lldp message_tx_interval 30
config lldp tx_delay 2
config lldp message_tx_hold_multiplier 4
config lldp reinit_delay 2
config lldp notification_interval 5
config lldp ports 1-27 notification disable
config lldp ports 1-27 admin_status tx_and_rx

# MBA

disable mac_based_access_control
config mac_based_access_control authorization network radius enable local enable
config mac_based_access_control ports 1-27 state disable
config mac_based_access_control ports 1-27 mode host_based
config mac_based_access_control method local
config mac_based_access_control password default
config mac_based_access_control max_users 128

# MCFILTER

config multicast filtering_mode default filter_unregistered_groups
config multicast filtering_mode vlan_2 filter_unregistered_groups
config multicast filtering_mode vlan_3 filter_unregistered_groups
config multicast filtering_mode vlan_5 filter_unregistered_groups
config multicast filtering_mode vlan_7 filter_unregistered_groups
config multicast filtering_mode vlan_11 filter_unregistered_groups
config multicast filtering_mode vlan_13 filter_unregistered_groups
config multicast filtering_mode vlan_15 filter_unregistered_groups
config multicast filtering_mode vlan_21 filter_unregistered_groups
config multicast filtering_mode vlan_64 filter_unregistered_groups
config multicast filtering_mode vlan_65 filter_unregistered_groups
config multicast filtering_mode vlan_66 filter_unregistered_groups
config multicast filtering_mode vlan_67 filter_unregistered_groups
config multicast filtering_mode vlan_90 filter_unregistered_groups
config multicast filtering_mode vlan_91 filter_unregistered_groups
config multicast filtering_mode vlan_150 filter_unregistered_groups
config multicast filtering_mode vlan_256 filter_unregistered_groups
config multicast filtering_mode krelcom filter_unregistered_groups
config multicast filtering_mode iptv filter_unregistered_groups

# COMPOUND_AUTHENTICATION

config authentication ports 1-27 auth_mode host_based
config authentication ports 1-27 multi_authen_methods none
enable authorization attributes
config authentication server failover block

# SNOOP

enable igmp_snooping
config igmp_snooping vlan vlan_150 report_suppression disable
config igmp_snooping vlan vlan_150 state disable fast_leave disable
config igmp_snooping querier vlan vlan_150 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3
config igmp_snooping vlan iptv report_suppression disable
config igmp_snooping vlan iptv state enable fast_leave disable
config igmp_snooping querier vlan iptv query_interval 125 max_response_time 10 r obustness_variable 2 last_member_query_interval 1 state disable version 2
config limited_multicast_addr ports 1-27 state disable

# MLDSNP


# ACCESS_AUTHENTICATION_CONTROL

config authen_login default method local
config authen_enable default method local_enable
config authen application console login default
config authen application console enable default
config authen application telnet login default
config authen application telnet enable default
config authen application ssh login default
config authen application ssh enable default
config authen application http login default
config authen application http enable default
config authen parameter response_timeout 30
config authen parameter attempt 3
disable authen_policy
config accounting service network state disable
config accounting service shell state disable
config accounting service system state disable

# AAA_LOCAL_ENABLE_PASSWORD

# AAA ADMIN PWD LIST
config admin local_enable



# AAA ADMIN PWD END

# NDP

config ipv6 nd ns ipif System retrans_time 0
config ipv6 nd ra ipif System state disable life_time 1800 reachable_time 120000 0 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min _rtr_adv_interval 198 max_rtr_adv_inter
val 600
config ipv6 nd ns ipif iptv retrans_time 0
config ipv6 nd ra ipif iptv state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_r tr_adv_interval 198 max_rtr_adv_interva
l 600
config ipv6 nd ns ipif voip retrans_time 0
config ipv6 nd ra ipif voip state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_r tr_adv_interval 198 max_rtr_adv_interva
l 600
config ipv6 nd ns ipif sklad retrans_time 0
config ipv6 nd ra ipif sklad state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_ rtr_adv_interval 198 max_rtr_adv_interv
al 600
config ipv6 nd ns ipif switch retrans_time 0
config ipv6 nd ra ipif switch state disable life_time 1800 reachable_time 120000 0 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min _rtr_adv_interval 198 max_rtr_adv_inter
val 600
config ipv6 nd ns ipif local_2 retrans_time 0
config ipv6 nd ra ipif local_2 state disable life_time 1800 reachable_time 12000 00 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable mi n_rtr_adv_interval 198 max_rtr_adv_inte
rval 600
config ipv6 nd ns ipif local_3 retrans_time 0
config ipv6 nd ra ipif local_3 state disable life_time 1800 reachable_time 12000 00 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable mi n_rtr_adv_interval 198 max_rtr_adv_inte
rval 600
config ipv6 nd ns ipif local_4 retrans_time 0
config ipv6 nd ra ipif local_4 state disable life_time 1800 reachable_time 12000 00 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable mi n_rtr_adv_interval 198 max_rtr_adv_inte
rval 600
config ipv6 nd ns ipif local_5 retrans_time 0
config ipv6 nd ra ipif local_5 state disable life_time 1800 reachable_time 12000 00 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable mi n_rtr_adv_interval 198 max_rtr_adv_inte
rval 600
config ipv6 nd ns ipif local_6 retrans_time 0
config ipv6 nd ra ipif local_6 state disable life_time 1800 reachable_time 12000 00 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable mi n_rtr_adv_interval 198 max_rtr_adv_inte
rval 600
config ipv6 nd ns ipif local_7 retrans_time 0
config ipv6 nd ra ipif local_7 state disable life_time 1800 reachable_time 12000 00 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable mi n_rtr_adv_interval 198 max_rtr_adv_inte
rval 600
config ipv6 nd ns ipif local_11 retrans_time 0
config ipv6 nd ra ipif local_11 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_12 retrans_time 0
config ipv6 nd ra ipif local_12 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_13 retrans_time 0
config ipv6 nd ra ipif local_13 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_14 retrans_time 0
config ipv6 nd ra ipif local_14 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_15 retrans_time 0
config ipv6 nd ra ipif local_15 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_18 retrans_time 0
config ipv6 nd ra ipif local_18 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_20 retrans_time 0
config ipv6 nd ra ipif local_20 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_21 retrans_time 0
config ipv6 nd ra ipif local_21 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_25 retrans_time 0
config ipv6 nd ra ipif local_25 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_31 retrans_time 0
config ipv6 nd ra ipif local_31 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_41 retrans_time 0
config ipv6 nd ra ipif local_41 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_42 retrans_time 0
config ipv6 nd ra ipif local_42 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_57 retrans_time 0
config ipv6 nd ra ipif local_57 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_60 retrans_time 0
config ipv6 nd ra ipif local_60 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_61 retrans_time 0
config ipv6 nd ra ipif local_61 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_65 retrans_time 0
config ipv6 nd ra ipif local_65 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_66 retrans_time 0
config ipv6 nd ra ipif local_66 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_67 retrans_time 0
config ipv6 nd ra ipif local_67 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_90 retrans_time 0
config ipv6 nd ra ipif local_90 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_91 retrans_time 0
config ipv6 nd ra ipif local_91 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_96 retrans_time 0
config ipv6 nd ra ipif local_96 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif local_150 retrans_time 0
config ipv6 nd ra ipif local_150 state disable life_time 1800 reachable_time 120 0000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_in
terval 600
config ipv6 nd ns ipif local_200 retrans_time 0
config ipv6 nd ra ipif local_200 state disable life_time 1800 reachable_time 120 0000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_in
terval 600
config ipv6 nd ns ipif local_39 retrans_time 0
config ipv6 nd ra ipif local_39 state disable life_time 1800 reachable_time 1200 000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable m in_rtr_adv_interval 198 max_rtr_adv_int
erval 600
config ipv6 nd ns ipif office retrans_time 0
config ipv6 nd ra ipif office state disable life_time 1800 reachable_time 120000 0 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min _rtr_adv_interval 198 max_rtr_adv_inter
val 600

# RIPng

disable ripng
config ripng method split_horizon
config ripng update 30
config ripng expire 180
config ripng garbage_collection 120
config ripng ipif System state disable metric 1
config ripng ipif iptv state disable metric 1
config ripng ipif voip state disable metric 1
config ripng ipif sklad state disable metric 1
config ripng ipif switch state disable metric 1
config ripng ipif local_2 state disable metric 1
config ripng ipif local_3 state disable metric 1
config ripng ipif local_4 state disable metric 1
config ripng ipif local_5 state disable metric 1
config ripng ipif local_6 state disable metric 1
config ripng ipif local_7 state disable metric 1
config ripng ipif local_11 state disable metric 1
config ripng ipif local_12 state disable metric 1
config ripng ipif local_13 state disable metric 1
config ripng ipif local_14 state disable metric 1
config ripng ipif local_15 state disable metric 1
config ripng ipif local_18 state disable metric 1
config ripng ipif local_20 state disable metric 1
config ripng ipif local_21 state disable metric 1
config ripng ipif local_25 state disable metric 1
config ripng ipif local_31 state disable metric 1
config ripng ipif local_41 state disable metric 1
config ripng ipif local_42 state disable metric 1
config ripng ipif local_57 state disable metric 1
config ripng ipif local_60 state disable metric 1
config ripng ipif local_61 state disable metric 1
config ripng ipif local_65 state disable metric 1
config ripng ipif local_66 state disable metric 1
config ripng ipif local_67 state disable metric 1
config ripng ipif local_90 state disable metric 1
config ripng ipif local_91 state disable metric 1
config ripng ipif local_96 state disable metric 1
config ripng ipif local_150 state disable metric 1
config ripng ipif local_200 state disable metric 1
config ripng ipif local_39 state disable metric 1

# ARP

config arp_aging time 5
config gratuitous_arp send ipif_status_up enable
config gratuitous_arp send dup_ip_detected enable
config gratuitous_arp learning enable

# ROUTEFILTER


# ROUTE

config route preference static 60
config route preference default 1
config route preference rip 100
config route preference ospfIntra 80
config route preference ospfInter 90
config route preference ospfExt1 110
config route preference ospfExt2 115
config route preference ebgp 70
config route preference ibgp 130
config ecmp algorithm ip_destination crc_low
enable ecmp ospf

# PROUTE


# RELAY6

config dhcpv6_relay hop_count 4
disable dhcpv6_relay

# DHCPv6_SERVER

disable dhcpv6_server
config dhcpv6_server ipif switch state enable
config dhcpv6_server ipif local_2 state enable
config dhcpv6_server ipif local_3 state enable
config dhcpv6_server ipif local_4 state enable
config dhcpv6_server ipif local_5 state enable
config dhcpv6_server ipif local_6 state enable
config dhcpv6_server ipif local_7 state enable
config dhcpv6_server ipif local_11 state enable
config dhcpv6_server ipif local_12 state enable
config dhcpv6_server ipif local_13 state enable
config dhcpv6_server ipif local_14 state enable
config dhcpv6_server ipif local_15 state enable
config dhcpv6_server ipif local_18 state enable
config dhcpv6_server ipif local_20 state enable
config dhcpv6_server ipif local_21 state enable
config dhcpv6_server ipif local_25 state enable
config dhcpv6_server ipif local_31 state enable
config dhcpv6_server ipif local_39 state enable
config dhcpv6_server ipif local_41 state enable
config dhcpv6_server ipif local_42 state enable
config dhcpv6_server ipif local_57 state enable
config dhcpv6_server ipif local_60 state enable
config dhcpv6_server ipif local_61 state enable
config dhcpv6_server ipif local_96 state enable
config dhcpv6_server ipif office state enable
config dhcpv6_server ipif iptv state enable
config dhcpv6_server ipif voip state enable
config dhcpv6_server ipif sklad state enable
config dhcpv6_server ipif System state enable
config dhcpv6_server ipif local_65 state enable
config dhcpv6_server ipif local_66 state enable
config dhcpv6_server ipif local_67 state enable
config dhcpv6_server ipif local_90 state enable
config dhcpv6_server ipif local_91 state enable
config dhcpv6_server ipif local_150 state enable
config dhcpv6_server ipif local_200 state enable

# IGMP

config igmp ipif System version 2 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif System last_member_query_interval 1
config igmp check_subscriber_source_network ipif System enable
config igmp ipif iptv version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif iptv last_member_query_interval 1
config igmp check_subscriber_source_network ipif iptv enable
config igmp ipif voip version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif voip last_member_query_interval 1
config igmp check_subscriber_source_network ipif voip enable
config igmp ipif sklad version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif sklad last_member_query_interval 1
config igmp check_subscriber_source_network ipif sklad enable
config igmp ipif switch version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif switch last_member_query_interval 1
config igmp check_subscriber_source_network ipif switch enable
config igmp ipif local_2 version 2 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_2 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_2 enable
config igmp ipif local_3 version 2 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_3 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_3 enable
config igmp ipif local_4 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_4 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_4 enable
config igmp ipif local_5 version 2 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_5 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_5 enable
config igmp ipif local_6 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_6 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_6 enable
config igmp ipif local_7 version 2 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_7 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_7 enable
config igmp ipif local_11 version 2 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_11 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_11 enable
config igmp ipif local_12 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_12 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_12 enable
config igmp ipif local_13 version 2 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_13 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_13 enable
config igmp ipif local_14 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_14 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_14 enable
config igmp ipif local_15 version 2 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_15 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_15 enable
config igmp ipif local_18 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_18 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_18 enable
config igmp ipif local_20 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_20 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_20 enable
config igmp ipif local_21 version 2 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_21 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_21 enable
config igmp ipif local_25 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_25 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_25 enable
config igmp ipif local_31 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_31 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_31 enable
config igmp ipif local_41 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_41 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_41 enable
config igmp ipif local_42 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_42 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_42 enable
config igmp ipif local_57 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_57 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_57 enable
config igmp ipif local_60 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_60 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_60 enable
config igmp ipif local_61 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_61 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_61 enable
config igmp ipif local_65 version 2 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_65 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_65 enable
config igmp ipif local_66 version 2 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_66 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_66 enable
config igmp ipif local_67 version 2 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_67 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_67 enable
config igmp ipif local_90 version 2 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_90 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_90 enable
config igmp ipif local_91 version 2 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_91 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_91 enable
config igmp ipif local_96 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_96 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_96 enable
config igmp ipif local_150 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_150 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_150 enable
config igmp ipif local_200 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_200 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_200 enable
config igmp ipif local_39 version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif local_39 last_member_query_interval 1
config igmp check_subscriber_source_network ipif local_39 enable
config igmp ipif office version 3 query_interval 125 max_response_time 10 robustness_variable 2 state disable
config igmp ipif office last_member_query_interval 1
config igmp check_subscriber_source_network ipif office enable

# PIMSM

disable pim
config pim cbsr hash_masklen 30
config pim cbsr bootstrap_period 60
config pim register_suppression_time 60
config pim register_probe_time 5
config pim last_hop_spt_switchover never
config pim crp holdtime 150 priority 192
config pim crp wildcard_prefix_cnt 0
config pim ipif System state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif System priority -1
config pim ipif iptv state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif iptv priority -1
config pim ipif voip state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif voip priority -1
config pim ipif sklad state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif sklad priority -1
config pim ipif switch state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif switch priority -1
config pim ipif local_2 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_2 priority -1
config pim ipif local_3 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_3 priority -1
config pim ipif local_4 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_4 priority -1
config pim ipif local_5 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_5 priority -1
config pim ipif local_6 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_6 priority -1
config pim ipif local_7 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_7 priority -1
config pim ipif local_11 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_11 priority -1
config pim ipif local_12 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_12 priority -1
config pim ipif local_13 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_13 priority -1
config pim ipif local_14 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_14 priority -1
config pim ipif local_15 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_15 priority -1
config pim ipif local_18 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_18 priority -1
config pim ipif local_20 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_20 priority -1
config pim ipif local_21 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_21 priority -1
config pim ipif local_25 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_25 priority -1
config pim ipif local_31 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_31 priority -1
config pim ipif local_41 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_41 priority -1
config pim ipif local_42 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_42 priority -1
config pim ipif local_57 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_57 priority -1
config pim ipif local_60 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_60 priority -1
config pim ipif local_61 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_61 priority -1
config pim ipif local_65 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_65 priority -1
config pim ipif local_66 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_66 priority -1
config pim ipif local_67 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_67 priority -1
config pim ipif local_90 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_90 priority -1
config pim ipif local_91 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_91 priority -1
config pim ipif local_96 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_96 priority -1
config pim ipif local_150 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_150 priority -1
config pim ipif local_200 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_200 priority -1
config pim ipif local_39 state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif local_39 priority -1
config pim ipif office state disable hello 30 jp_interval 60 mode dm dr_priority 1
config pim cbsr ipif office priority -1

# DVMRP

disable dvmrp
config dvmrp ipif System metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif iptv metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif voip metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif sklad metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif switch metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_2 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_3 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_4 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_5 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_6 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_7 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_11 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_12 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_13 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_14 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_15 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_18 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_20 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_21 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_25 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_31 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_41 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_42 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_57 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_60 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_61 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_65 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_66 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_67 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_90 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_91 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_96 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_150 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_200 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif local_39 metric 1 probe 10 neighbor_timeout 35 state disable
config dvmrp ipif office metric 1 probe 10 neighbor_timeout 35 state disable

# IPMROUTE


# RIP

disable rip
config rip ipif System tx_mode disable state disable
config rip ipif System rx_mode disable state disable
config rip ipif iptv tx_mode disable state disable
config rip ipif iptv rx_mode disable state disable
config rip ipif voip tx_mode disable state disable
config rip ipif voip rx_mode disable state disable
config rip ipif sklad tx_mode disable state disable
config rip ipif sklad rx_mode disable state disable
config rip ipif switch tx_mode disable state disable
config rip ipif switch rx_mode disable state disable
config rip ipif local_2 tx_mode disable state disable
config rip ipif local_2 rx_mode disable state disable
config rip ipif local_3 tx_mode disable state disable
config rip ipif local_3 rx_mode disable state disable
config rip ipif local_4 tx_mode disable state disable
config rip ipif local_4 rx_mode disable state disable
config rip ipif local_5 tx_mode disable state disable
config rip ipif local_5 rx_mode disable state disable
config rip ipif local_6 tx_mode disable state disable
config rip ipif local_6 rx_mode disable state disable
config rip ipif local_7 tx_mode disable state disable
config rip ipif local_7 rx_mode disable state disable
config rip ipif local_11 tx_mode disable state disable
config rip ipif local_11 rx_mode disable state disable
config rip ipif local_12 tx_mode disable state disable
config rip ipif local_12 rx_mode disable state disable
config rip ipif local_13 tx_mode disable state disable
config rip ipif local_13 rx_mode disable state disable
config rip ipif local_14 tx_mode disable state disable
config rip ipif local_14 rx_mode disable state disable
config rip ipif local_15 tx_mode disable state disable
config rip ipif local_15 rx_mode disable state disable
config rip ipif local_18 tx_mode disable state disable
config rip ipif local_18 rx_mode disable state disable
config rip ipif local_20 tx_mode disable state disable
config rip ipif local_20 rx_mode disable state disable
config rip ipif local_21 tx_mode disable state disable
config rip ipif local_21 rx_mode disable state disable
config rip ipif local_25 tx_mode disable state disable
config rip ipif local_25 rx_mode disable state disable
config rip ipif local_31 tx_mode disable state disable
config rip ipif local_31 rx_mode disable state disable
config rip ipif local_41 tx_mode disable state disable
config rip ipif local_41 rx_mode disable state disable
config rip ipif local_42 tx_mode disable state disable
config rip ipif local_42 rx_mode disable state disable
config rip ipif local_57 tx_mode disable state disable
config rip ipif local_57 rx_mode disable state disable
config rip ipif local_60 tx_mode disable state disable
config rip ipif local_60 rx_mode disable state disable
config rip ipif local_61 tx_mode disable state disable
config rip ipif local_61 rx_mode disable state disable
config rip ipif local_65 tx_mode disable state disable
config rip ipif local_65 rx_mode disable state disable
config rip ipif local_66 tx_mode disable state disable
config rip ipif local_66 rx_mode disable state disable
config rip ipif local_67 tx_mode disable state disable
config rip ipif local_67 rx_mode disable state disable
config rip ipif local_90 tx_mode disable state disable
config rip ipif local_90 rx_mode disable state disable
config rip ipif local_91 tx_mode disable state disable
config rip ipif local_91 rx_mode disable state disable
config rip ipif local_96 tx_mode disable state disable
config rip ipif local_96 rx_mode disable state disable
config rip ipif local_150 tx_mode disable state disable
config rip ipif local_150 rx_mode disable state disable
config rip ipif local_200 tx_mode disable state disable
config rip ipif local_200 rx_mode disable state disable
config rip ipif local_39 tx_mode disable state disable
config rip ipif local_39 rx_mode disable state disable
config rip ipif office tx_mode disable state disable
config rip ipif office rx_mode disable state disable

# MD5


# OSPF

config ospf ipif switch area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif switch authentication none metric 1 state disable passive disable
config ospf ipif local_2 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_2 authentication none metric 1 state disable passive disable
config ospf ipif local_3 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_3 authentication none metric 1 state disable passive disable
config ospf ipif local_4 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_4 authentication none metric 1 state disable passive disable
config ospf ipif local_5 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_5 authentication none metric 1 state disable passive disable
config ospf ipif local_6 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_6 authentication none metric 1 state disable passive disable
config ospf ipif local_7 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_7 authentication none metric 1 state disable passive disable
config ospf ipif local_11 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_11 authentication none metric 1 state disable passive disable
config ospf ipif local_12 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_12 authentication none metric 1 state disable passive disable
config ospf ipif local_13 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_13 authentication none metric 1 state disable passive disable
config ospf ipif local_14 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_14 authentication none metric 1 state disable passive disable
config ospf ipif local_15 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_15 authentication none metric 1 state disable passive disable
config ospf ipif local_18 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_18 authentication none metric 1 state disable passive disable
config ospf ipif local_20 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_20 authentication none metric 1 state disable passive disable
config ospf ipif local_21 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_21 authentication none metric 1 state disable passive disable
config ospf ipif local_25 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_25 authentication none metric 1 state disable passive disable
config ospf ipif local_31 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_31 authentication none metric 1 state disable passive disable
config ospf ipif local_39 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_39 authentication none metric 1 state disable passive disable
config ospf ipif local_41 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_41 authentication none metric 1 state disable passive disable
config ospf ipif local_42 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_42 authentication none metric 1 state disable passive disable
config ospf ipif local_57 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_57 authentication none metric 1 state disable passive disable
config ospf ipif local_60 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_60 authentication none metric 1 state disable passive disable
config ospf ipif local_61 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_61 authentication none metric 1 state disable passive disable
config ospf ipif local_96 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_96 authentication none metric 1 state disable passive disable
config ospf ipif office area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif office authentication none metric 1 state disable passive disable
config ospf ipif iptv area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif iptv authentication none metric 1 state disable passive disable
config ospf ipif voip area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif voip authentication none metric 1 state disable passive disable
config ospf ipif sklad area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif sklad authentication none metric 1 state disable passive disable
config ospf ipif System area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif System authentication none metric 1 state disable passive disable
config ospf ipif local_65 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_65 authentication none metric 1 state disable passive disable
config ospf ipif local_66 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_66 authentication none metric 1 state disable passive disable
config ospf ipif local_67 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_67 authentication none metric 1 state disable passive disable
config ospf ipif local_90 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_90 authentication none metric 1 state disable passive disable
config ospf ipif local_91 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_91 authentication none metric 1 state disable passive disable
config ospf ipif local_150 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_150 authentication none metric 1 state disable passive disable
config ospf ipif local_200 area 0.0.0.0 priority 1 hello_interval 10 dead_interval 40
config ospf ipif local_200 authentication none metric 1 state disable passive disable
config ospf router_id 0.0.0.0
disable ospf

# BGP


# OSPFv3

config ospfv3 router_id 0.0.0.0
disable ospfv3

# DNSR

disable dnsr
config dnsr primary nameserver 192.168.64.1
config dnsr secondary nameserver 192.168.64.5
enable dnsr cache
enable dnsr static
config dnsr add static vpn.globus.crimea-ua.net 192.168.64.1
config dnsr add static globus.crimea-ua.net 192.168.64.5
config dnsr add static media-cluster.org 192.168.64.5
config dnsr add static ftp2.globus.crimea-ua.net 192.168.64.198
config dnsr add static ftp1.globus.crimea-ua.net 192.168.64.199
config dnsr add static irc.globus.crimea-ua.net 192.168.64.199
config dnsr add static torrent.globus.crimea-ua.net 192.168.64.200
config dnsr add static ftp.globus.crimea-ua.net 192.168.64.200

# DHCP_RELAY

enable dhcp_relay
config dhcp_relay hops 4 time 0
config dhcp_relay option_82 state disable
config dhcp_relay option_82 check disable
config dhcp_relay option_82 policy replace
config dhcp_relay option_60 state disable
config dhcp_relay option_61 state disable
config dhcp_relay add ipif System 192.168.64.1
config dhcp_relay option_60 default mode drop
config dhcp_relay option_61 default drop
disable dhcp_local_relay

# VRRP

config vrrp ipif System authtype none
config vrrp ipif iptv authtype none
config vrrp ipif voip authtype none
config vrrp ipif sklad authtype none
config vrrp ipif switch authtype none
config vrrp ipif local_2 authtype none
config vrrp ipif local_3 authtype none
config vrrp ipif local_4 authtype none
config vrrp ipif local_5 authtype none
config vrrp ipif local_6 authtype none
config vrrp ipif local_7 authtype none
config vrrp ipif local_11 authtype none
config vrrp ipif local_12 authtype none
config vrrp ipif local_13 authtype none
config vrrp ipif local_14 authtype none
config vrrp ipif local_15 authtype none
config vrrp ipif local_18 authtype none
config vrrp ipif local_20 authtype none
config vrrp ipif local_21 authtype none
config vrrp ipif local_25 authtype none
config vrrp ipif local_31 authtype none
config vrrp ipif local_41 authtype none
config vrrp ipif local_42 authtype none
config vrrp ipif local_57 authtype none
config vrrp ipif local_60 authtype none
config vrrp ipif local_61 authtype none
config vrrp ipif local_65 authtype none
config vrrp ipif local_66 authtype none
config vrrp ipif local_67 authtype none
config vrrp ipif local_90 authtype none
config vrrp ipif local_91 authtype none
config vrrp ipif local_96 authtype none
config vrrp ipif local_150 authtype none
config vrrp ipif local_200 authtype none
config vrrp ipif local_39 authtype none
config vrrp ipif office authtype none
disable vrrp

disable vrrp ping


#-------------------------------------------------------------------
# End of configuration file for DGS-3627G