command-start

# Basic
enable web 80

# unknown type
config gratuitous_arp send ipif_status_up disable
config gratuitous_arp send dup_ip_detected disable
config gratuitous_arp learning disable
config gratuitous_arp send periodically interval 0
config arp_aging time 5
config fdb aging_time 300
enable telnet 23

# Vlan
disable asymmetric_vlan
create vlan default
config vlan vlanid 1 add untagged 1-28
config vlan vlanid 1 advertisement disable
create vlan v_adm tag 4000
config vlan vlanid 4000 add tagged 1-28
config vlan vlanid 4000 advertisement disable
config multicast filter 1 filter
config multicast filter 2 filter
config multicast filter 3 filter
config multicast filter 4 filter
config multicast filter 5 filter
config multicast filter 6 filter
config multicast filter 7 filter
config multicast filter 8 filter
config multicast filter 9 filter
config multicast filter 10 filter
config multicast filter 11 filter
config multicast filter 12 filter
config multicast filter 13 filter
config multicast filter 14 filter
config multicast filter 15 filter
config multicast filter 16 filter
config multicast filter 17 filter
config multicast filter 18 filter
config multicast filter 19 filter
config multicast filter 20 filter
config multicast filter 21 filter
config multicast filter 22 filter
config multicast filter 23 filter
config multicast filter 24 filter
config multicast filter 25 forward
config multicast filter 26 forward
config multicast filter 27 forward
config multicast filter 28 forward
enable management vlan
config management vlan v_adm

# IMPBv2
config address_binding ip_mac ports 1 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 1
config address_binding ip_mac ports 2 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 2
config address_binding ip_mac ports 3 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 3
config address_binding ip_mac ports 4 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 4
config address_binding ip_mac ports 5 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 5
config address_binding ip_mac ports 6 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 6
config address_binding ip_mac ports 7 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 7
config address_binding ip_mac ports 8 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 8
config address_binding ip_mac ports 9 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 9
config address_binding ip_mac ports 10 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 10
config address_binding ip_mac ports 11 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 11
config address_binding ip_mac ports 12 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 12
config address_binding ip_mac ports 13 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 13
config address_binding ip_mac ports 14 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 14
config address_binding ip_mac ports 15 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 15
config address_binding ip_mac ports 16 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 16
config address_binding ip_mac ports 17 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 17
config address_binding ip_mac ports 18 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 18
config address_binding ip_mac ports 19 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 19
config address_binding ip_mac ports 20 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 20
config address_binding ip_mac ports 21 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 21
config address_binding ip_mac ports 22 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 22
config address_binding ip_mac ports 23 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 23
config address_binding ip_mac ports 24 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 24
config address_binding ip_mac ports 25 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 25
config address_binding ip_mac ports 26 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 26
config address_binding ip_mac ports 27 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 27
config address_binding ip_mac ports 28 ip_inspection disable state disable
disable address_binding dhcp_snoop ports 28
config dhcp_server screening ports 1-24 state enable

# IP
config ipif System ipaddress 10.100.100.221/255.255.0.0 gateway 10.100.100.1
config ipif System dhcp_option12 state disable
config ipif System dhcp_option12 hostname DES-1210-28/ME
enable autoconfig

# LLDP
disable lldp
config lldp message_tx_hold_multiplier 4
config lldp message_tx_interval 30
config lldp reinit_delay 2
config lldp tx_delay 2
config lldp ports 1-28 mgt_addr ipv4 10.100.100.221 disable
config lldp ports 1 admin_status tx_and_rx
config lldp ports 1 notification disable
config lldp ports 1 basic_tlvs all disable
config lldp ports 1 dot1_tlv_pvid disable
config lldp ports 1 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 2 admin_status tx_and_rx
config lldp ports 2 notification disable
config lldp ports 2 basic_tlvs all disable
config lldp ports 2 dot1_tlv_pvid disable
config lldp ports 2 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 3 admin_status tx_and_rx
config lldp ports 3 notification disable
config lldp ports 3 basic_tlvs all disable
config lldp ports 3 dot1_tlv_pvid disable
config lldp ports 3 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 4 admin_status tx_and_rx
config lldp ports 4 notification disable
config lldp ports 4 basic_tlvs all disable
config lldp ports 4 dot1_tlv_pvid disable
config lldp ports 4 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 5 admin_status tx_and_rx
config lldp ports 5 notification disable
config lldp ports 5 basic_tlvs all disable
config lldp ports 5 dot1_tlv_pvid disable
config lldp ports 5 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 6 admin_status tx_and_rx
config lldp ports 6 notification disable
config lldp ports 6 basic_tlvs all disable
config lldp ports 6 dot1_tlv_pvid disable
config lldp ports 6 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 7 admin_status tx_and_rx
config lldp ports 7 notification disable
config lldp ports 7 basic_tlvs all disable
config lldp ports 7 dot1_tlv_pvid disable
config lldp ports 7 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 8 admin_status tx_and_rx
config lldp ports 8 notification disable
config lldp ports 8 basic_tlvs all disable
config lldp ports 8 dot1_tlv_pvid disable
config lldp ports 8 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 9 admin_status tx_and_rx
config lldp ports 9 notification disable
config lldp ports 9 basic_tlvs all disable
config lldp ports 9 dot1_tlv_pvid disable
config lldp ports 9 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 10 admin_status tx_and_rx
config lldp ports 10 notification disable
config lldp ports 10 basic_tlvs all disable
config lldp ports 10 dot1_tlv_pvid disable
config lldp ports 10 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 11 admin_status tx_and_rx
config lldp ports 11 notification disable
config lldp ports 11 basic_tlvs all disable
config lldp ports 11 dot1_tlv_pvid disable
config lldp ports 11 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 12 admin_status tx_and_rx
config lldp ports 12 notification disable
config lldp ports 12 basic_tlvs all disable
config lldp ports 12 dot1_tlv_pvid disable
config lldp ports 12 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 13 admin_status tx_and_rx
config lldp ports 13 notification disable
config lldp ports 13 basic_tlvs all disable
config lldp ports 13 dot1_tlv_pvid disable
config lldp ports 13 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 14 admin_status tx_and_rx
config lldp ports 14 notification disable
config lldp ports 14 basic_tlvs all disable
config lldp ports 14 dot1_tlv_pvid disable
config lldp ports 14 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 15 admin_status tx_and_rx
config lldp ports 15 notification disable
config lldp ports 15 basic_tlvs all disable
config lldp ports 15 dot1_tlv_pvid disable
config lldp ports 15 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 16 admin_status tx_and_rx
config lldp ports 16 notification disable
config lldp ports 16 basic_tlvs all disable
config lldp ports 16 dot1_tlv_pvid disable
config lldp ports 16 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 17 admin_status tx_and_rx
config lldp ports 17 notification disable
config lldp ports 17 basic_tlvs all disable
config lldp ports 17 dot1_tlv_pvid disable
config lldp ports 17 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 18 admin_status tx_and_rx
config lldp ports 18 notification disable
config lldp ports 18 basic_tlvs all disable
config lldp ports 18 dot1_tlv_pvid disable
config lldp ports 18 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 19 admin_status tx_and_rx
config lldp ports 19 notification disable
config lldp ports 19 basic_tlvs all disable
config lldp ports 19 dot1_tlv_pvid disable
config lldp ports 19 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 20 admin_status tx_and_rx
config lldp ports 20 notification disable
config lldp ports 20 basic_tlvs all disable
config lldp ports 20 dot1_tlv_pvid disable
config lldp ports 20 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 21 admin_status tx_and_rx
config lldp ports 21 notification disable
config lldp ports 21 basic_tlvs all disable
config lldp ports 21 dot1_tlv_pvid disable
config lldp ports 21 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 22 admin_status tx_and_rx
config lldp ports 22 notification disable
config lldp ports 22 basic_tlvs all disable
config lldp ports 22 dot1_tlv_pvid disable
config lldp ports 22 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 23 admin_status tx_and_rx
config lldp ports 23 notification disable
config lldp ports 23 basic_tlvs all disable
config lldp ports 23 dot1_tlv_pvid disable
config lldp ports 23 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 24 admin_status tx_and_rx
config lldp ports 24 notification disable
config lldp ports 24 basic_tlvs all disable
config lldp ports 24 dot1_tlv_pvid disable
config lldp ports 24 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 25 admin_status tx_and_rx
config lldp ports 25 notification disable
config lldp ports 25 basic_tlvs all disable
config lldp ports 25 dot1_tlv_pvid disable
config lldp ports 25 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 26 admin_status tx_and_rx
config lldp ports 26 notification disable
config lldp ports 26 basic_tlvs all disable
config lldp ports 26 dot1_tlv_pvid disable
config lldp ports 26 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 27 admin_status tx_and_rx
config lldp ports 27 notification disable
config lldp ports 27 basic_tlvs all disable
config lldp ports 27 dot1_tlv_pvid disable
config lldp ports 27 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 28 admin_status tx_and_rx
config lldp ports 28 notification disable
config lldp ports 28 basic_tlvs all disable
config lldp ports 28 dot1_tlv_pvid disable
config lldp ports 28 dot1_tlv_vlan_name vlanid 1-4094 disable
config lldp ports 1 dot1_tlv_protocol_identity eapol disable
config lldp ports 1 dot1_tlv_protocol_identity lacp disable
config lldp ports 1 dot1_tlv_protocol_identity gvrp disable
config lldp ports 1 dot1_tlv_protocol_identity stp disable
config lldp ports 2 dot1_tlv_protocol_identity eapol disable
config lldp ports 2 dot1_tlv_protocol_identity lacp disable
config lldp ports 2 dot1_tlv_protocol_identity gvrp disable
config lldp ports 2 dot1_tlv_protocol_identity stp disable
config lldp ports 3 dot1_tlv_protocol_identity eapol disable
config lldp ports 3 dot1_tlv_protocol_identity lacp disable
config lldp ports 3 dot1_tlv_protocol_identity gvrp disable
config lldp ports 3 dot1_tlv_protocol_identity stp disable
config lldp ports 4 dot1_tlv_protocol_identity eapol disable
config lldp ports 4 dot1_tlv_protocol_identity lacp disable
config lldp ports 4 dot1_tlv_protocol_identity gvrp disable
config lldp ports 4 dot1_tlv_protocol_identity stp disable
config lldp ports 5 dot1_tlv_protocol_identity eapol disable
config lldp ports 5 dot1_tlv_protocol_identity lacp disable
config lldp ports 5 dot1_tlv_protocol_identity gvrp disable
config lldp ports 5 dot1_tlv_protocol_identity stp disable
config lldp ports 6 dot1_tlv_protocol_identity eapol disable
config lldp ports 6 dot1_tlv_protocol_identity lacp disable
config lldp ports 6 dot1_tlv_protocol_identity gvrp disable
config lldp ports 6 dot1_tlv_protocol_identity stp disable
config lldp ports 7 dot1_tlv_protocol_identity eapol disable
config lldp ports 7 dot1_tlv_protocol_identity lacp disable
config lldp ports 7 dot1_tlv_protocol_identity gvrp disable
config lldp ports 7 dot1_tlv_protocol_identity stp disable
config lldp ports 8 dot1_tlv_protocol_identity eapol disable
config lldp ports 8 dot1_tlv_protocol_identity lacp disable
config lldp ports 8 dot1_tlv_protocol_identity gvrp disable
config lldp ports 8 dot1_tlv_protocol_identity stp disable
config lldp ports 9 dot1_tlv_protocol_identity eapol disable
config lldp ports 9 dot1_tlv_protocol_identity lacp disable
config lldp ports 9 dot1_tlv_protocol_identity gvrp disable
config lldp ports 9 dot1_tlv_protocol_identity stp disable
config lldp ports 10 dot1_tlv_protocol_identity eapol disable
config lldp ports 10 dot1_tlv_protocol_identity lacp disable
config lldp ports 10 dot1_tlv_protocol_identity gvrp disable
config lldp ports 10 dot1_tlv_protocol_identity stp disable
config lldp ports 11 dot1_tlv_protocol_identity eapol disable
config lldp ports 11 dot1_tlv_protocol_identity lacp disable
config lldp ports 11 dot1_tlv_protocol_identity gvrp disable
config lldp ports 11 dot1_tlv_protocol_identity stp disable
config lldp ports 12 dot1_tlv_protocol_identity eapol disable
config lldp ports 12 dot1_tlv_protocol_identity lacp disable
config lldp ports 12 dot1_tlv_protocol_identity gvrp disable
config lldp ports 12 dot1_tlv_protocol_identity stp disable
config lldp ports 13 dot1_tlv_protocol_identity eapol disable
config lldp ports 13 dot1_tlv_protocol_identity lacp disable
config lldp ports 13 dot1_tlv_protocol_identity gvrp disable
config lldp ports 13 dot1_tlv_protocol_identity stp disable
config lldp ports 14 dot1_tlv_protocol_identity eapol disable
config lldp ports 14 dot1_tlv_protocol_identity lacp disable
config lldp ports 14 dot1_tlv_protocol_identity gvrp disable
config lldp ports 14 dot1_tlv_protocol_identity stp disable
config lldp ports 15 dot1_tlv_protocol_identity eapol disable
config lldp ports 15 dot1_tlv_protocol_identity lacp disable
config lldp ports 15 dot1_tlv_protocol_identity gvrp disable
config lldp ports 15 dot1_tlv_protocol_identity stp disable
config lldp ports 16 dot1_tlv_protocol_identity eapol disable
config lldp ports 16 dot1_tlv_protocol_identity lacp disable
config lldp ports 16 dot1_tlv_protocol_identity gvrp disable
config lldp ports 16 dot1_tlv_protocol_identity stp disable
config lldp ports 17 dot1_tlv_protocol_identity eapol disable
config lldp ports 17 dot1_tlv_protocol_identity lacp disable
config lldp ports 17 dot1_tlv_protocol_identity gvrp disable
config lldp ports 17 dot1_tlv_protocol_identity stp disable
config lldp ports 18 dot1_tlv_protocol_identity eapol disable
config lldp ports 18 dot1_tlv_protocol_identity lacp disable
config lldp ports 18 dot1_tlv_protocol_identity gvrp disable
config lldp ports 18 dot1_tlv_protocol_identity stp disable
config lldp ports 19 dot1_tlv_protocol_identity eapol disable
config lldp ports 19 dot1_tlv_protocol_identity lacp disable
config lldp ports 19 dot1_tlv_protocol_identity gvrp disable
config lldp ports 19 dot1_tlv_protocol_identity stp disable
config lldp ports 20 dot1_tlv_protocol_identity eapol disable
config lldp ports 20 dot1_tlv_protocol_identity lacp disable
config lldp ports 20 dot1_tlv_protocol_identity gvrp disable
config lldp ports 20 dot1_tlv_protocol_identity stp disable
config lldp ports 21 dot1_tlv_protocol_identity eapol disable
config lldp ports 21 dot1_tlv_protocol_identity lacp disable
config lldp ports 21 dot1_tlv_protocol_identity gvrp disable
config lldp ports 21 dot1_tlv_protocol_identity stp disable
config lldp ports 22 dot1_tlv_protocol_identity eapol disable
config lldp ports 22 dot1_tlv_protocol_identity lacp disable
config lldp ports 22 dot1_tlv_protocol_identity gvrp disable
config lldp ports 22 dot1_tlv_protocol_identity stp disable
config lldp ports 23 dot1_tlv_protocol_identity eapol disable
config lldp ports 23 dot1_tlv_protocol_identity lacp disable
config lldp ports 23 dot1_tlv_protocol_identity gvrp disable
config lldp ports 23 dot1_tlv_protocol_identity stp disable
config lldp ports 24 dot1_tlv_protocol_identity eapol disable
config lldp ports 24 dot1_tlv_protocol_identity lacp disable
config lldp ports 24 dot1_tlv_protocol_identity gvrp disable
config lldp ports 24 dot1_tlv_protocol_identity stp disable
config lldp ports 25 dot1_tlv_protocol_identity eapol disable
config lldp ports 25 dot1_tlv_protocol_identity lacp disable
config lldp ports 25 dot1_tlv_protocol_identity gvrp disable
config lldp ports 25 dot1_tlv_protocol_identity stp disable
config lldp ports 26 dot1_tlv_protocol_identity eapol disable
config lldp ports 26 dot1_tlv_protocol_identity lacp disable
config lldp ports 26 dot1_tlv_protocol_identity gvrp disable
config lldp ports 26 dot1_tlv_protocol_identity stp disable
config lldp ports 27 dot1_tlv_protocol_identity eapol disable
config lldp ports 27 dot1_tlv_protocol_identity lacp disable
config lldp ports 27 dot1_tlv_protocol_identity gvrp disable
config lldp ports 27 dot1_tlv_protocol_identity stp disable
config lldp ports 28 dot1_tlv_protocol_identity eapol disable
config lldp ports 28 dot1_tlv_protocol_identity lacp disable
config lldp ports 28 dot1_tlv_protocol_identity gvrp disable
config lldp ports 28 dot1_tlv_protocol_identity stp disable
config lldp ports 1 dot3_tlvs all disable
config lldp ports 2 dot3_tlvs all disable
config lldp ports 3 dot3_tlvs all disable
config lldp ports 4 dot3_tlvs all disable
config lldp ports 5 dot3_tlvs all disable
config lldp ports 6 dot3_tlvs all disable
config lldp ports 7 dot3_tlvs all disable
config lldp ports 8 dot3_tlvs all disable
config lldp ports 9 dot3_tlvs all disable
config lldp ports 10 dot3_tlvs all disable
config lldp ports 11 dot3_tlvs all disable
config lldp ports 12 dot3_tlvs all disable
config lldp ports 13 dot3_tlvs all disable
config lldp ports 14 dot3_tlvs all disable
config lldp ports 15 dot3_tlvs all disable
config lldp ports 16 dot3_tlvs all disable
config lldp ports 17 dot3_tlvs all disable
config lldp ports 18 dot3_tlvs all disable
config lldp ports 19 dot3_tlvs all disable
config lldp ports 20 dot3_tlvs all disable
config lldp ports 21 dot3_tlvs all disable
config lldp ports 22 dot3_tlvs all disable
config lldp ports 23 dot3_tlvs all disable
config lldp ports 24 dot3_tlvs all disable
config lldp ports 25 dot3_tlvs all disable
config lldp ports 26 dot3_tlvs all disable
config lldp ports 27 dot3_tlvs all disable
config lldp ports 28 dot3_tlvs all disable

# QoS
config scheduling_mechanism strict
config scheduling 0 weight 1
config scheduling 1 weight 2
config scheduling 2 weight 4
config scheduling 3 weight 8
config 802.1p default_priority 1 0
config 802.1p default_priority 2 0
config 802.1p default_priority 3 0
config 802.1p default_priority 4 0
config 802.1p default_priority 5 0
config 802.1p default_priority 6 0
config 802.1p default_priority 7 0
config 802.1p default_priority 8 0
config 802.1p default_priority 9 0
config 802.1p default_priority 10 0
config 802.1p default_priority 11 0
config 802.1p default_priority 12 0
config 802.1p default_priority 13 0
config 802.1p default_priority 14 0
config 802.1p default_priority 15 0
config 802.1p default_priority 16 0
config 802.1p default_priority 17 0
config 802.1p default_priority 18 0
config 802.1p default_priority 19 0
config 802.1p default_priority 20 0
config 802.1p default_priority 21 0
config 802.1p default_priority 22 0
config 802.1p default_priority 23 0
config 802.1p default_priority 24 0
config 802.1p default_priority 25 0
config 802.1p default_priority 26 0
config 802.1p default_priority 27 0
config 802.1p default_priority 28 0
config 802.1p user_priority 0 1
config 802.1p user_priority 1 0
config 802.1p user_priority 2 0
config 802.1p user_priority 3 1
config 802.1p user_priority 4 2
config 802.1p user_priority 5 2
config 802.1p user_priority 6 3
config 802.1p user_priority 7 3
config dscp_mapping dscp_value 0 class 0
config dscp_mapping dscp_value 1 class 0
config dscp_mapping dscp_value 2 class 0
config dscp_mapping dscp_value 3 class 0
config dscp_mapping dscp_value 4 class 0
config dscp_mapping dscp_value 5 class 0
config dscp_mapping dscp_value 6 class 0
config dscp_mapping dscp_value 7 class 0
config dscp_mapping dscp_value 8 class 0
config dscp_mapping dscp_value 9 class 0
config dscp_mapping dscp_value 10 class 0
config dscp_mapping dscp_value 11 class 0
config dscp_mapping dscp_value 12 class 0
config dscp_mapping dscp_value 13 class 0
config dscp_mapping dscp_value 14 class 0
config dscp_mapping dscp_value 15 class 0
config dscp_mapping dscp_value 16 class 0
config dscp_mapping dscp_value 17 class 0
config dscp_mapping dscp_value 18 class 0
config dscp_mapping dscp_value 19 class 0
config dscp_mapping dscp_value 20 class 0
config dscp_mapping dscp_value 21 class 0
config dscp_mapping dscp_value 22 class 0
config dscp_mapping dscp_value 23 class 0
config dscp_mapping dscp_value 24 class 0
config dscp_mapping dscp_value 25 class 0
config dscp_mapping dscp_value 26 class 0
config dscp_mapping dscp_value 27 class 0
config dscp_mapping dscp_value 28 class 0
config dscp_mapping dscp_value 29 class 0
config dscp_mapping dscp_value 30 class 0
config dscp_mapping dscp_value 31 class 0
config dscp_mapping dscp_value 32 class 0
config dscp_mapping dscp_value 33 class 0
config dscp_mapping dscp_value 34 class 0
config dscp_mapping dscp_value 35 class 0
config dscp_mapping dscp_value 36 class 0
config dscp_mapping dscp_value 37 class 0
config dscp_mapping dscp_value 38 class 0
config dscp_mapping dscp_value 39 class 0
config dscp_mapping dscp_value 40 class 0
config dscp_mapping dscp_value 41 class 0
config dscp_mapping dscp_value 42 class 0
config dscp_mapping dscp_value 43 class 0
config dscp_mapping dscp_value 44 class 0
config dscp_mapping dscp_value 45 class 0
config dscp_mapping dscp_value 46 class 0
config dscp_mapping dscp_value 47 class 0
config dscp_mapping dscp_value 48 class 0
config dscp_mapping dscp_value 49 class 0
config dscp_mapping dscp_value 50 class 0
config dscp_mapping dscp_value 51 class 0
config dscp_mapping dscp_value 52 class 0
config dscp_mapping dscp_value 53 class 0
config dscp_mapping dscp_value 54 class 0
config dscp_mapping dscp_value 55 class 0
config dscp_mapping dscp_value 56 class 0
config dscp_mapping dscp_value 57 class 0
config dscp_mapping dscp_value 58 class 0
config dscp_mapping dscp_value 59 class 0
config dscp_mapping dscp_value 60 class 0
config dscp_mapping dscp_value 61 class 0
config dscp_mapping dscp_value 62 class 0
config dscp_mapping dscp_value 63 class 0
config cos mapping port 1 none
config cos mapping port 1 802.1p
config cos mapping port 1 dscp
config cos mapping port 2 none
config cos mapping port 2 802.1p
config cos mapping port 2 dscp
config cos mapping port 3 none
config cos mapping port 3 802.1p
config cos mapping port 3 dscp
config cos mapping port 4 none
config cos mapping port 4 802.1p
config cos mapping port 4 dscp
config cos mapping port 5 none
config cos mapping port 5 802.1p
config cos mapping port 5 dscp
config cos mapping port 6 none
config cos mapping port 6 802.1p
config cos mapping port 6 dscp
config cos mapping port 7 none
config cos mapping port 7 802.1p
config cos mapping port 7 dscp
config cos mapping port 8 none
config cos mapping port 8 802.1p
config cos mapping port 8 dscp
config cos mapping port 9 none
config cos mapping port 9 802.1p
config cos mapping port 9 dscp
config cos mapping port 10 none
config cos mapping port 10 802.1p
config cos mapping port 10 dscp
config cos mapping port 11 none
config cos mapping port 11 802.1p
config cos mapping port 11 dscp
config cos mapping port 12 none
config cos mapping port 12 802.1p
config cos mapping port 12 dscp
config cos mapping port 13 none
config cos mapping port 13 802.1p
config cos mapping port 13 dscp
config cos mapping port 14 none
config cos mapping port 14 802.1p
config cos mapping port 14 dscp
config cos mapping port 15 none
config cos mapping port 15 802.1p
config cos mapping port 15 dscp
config cos mapping port 16 none
config cos mapping port 16 802.1p
config cos mapping port 16 dscp
config cos mapping port 17 none
config cos mapping port 17 802.1p
config cos mapping port 17 dscp
config cos mapping port 18 none
config cos mapping port 18 802.1p
config cos mapping port 18 dscp
config cos mapping port 19 none
config cos mapping port 19 802.1p
config cos mapping port 19 dscp
config cos mapping port 20 none
config cos mapping port 20 802.1p
config cos mapping port 20 dscp
config cos mapping port 21 none
config cos mapping port 21 802.1p
config cos mapping port 21 dscp
config cos mapping port 22 none
config cos mapping port 22 802.1p
config cos mapping port 22 dscp
config cos mapping port 23 none
config cos mapping port 23 802.1p
config cos mapping port 23 dscp
config cos mapping port 24 none
config cos mapping port 24 802.1p
config cos mapping port 24 dscp
config cos mapping port 25 none
config cos mapping port 25 802.1p
config cos mapping port 25 dscp
config cos mapping port 26 none
config cos mapping port 26 802.1p
config cos mapping port 26 dscp
config cos mapping port 27 none
config cos mapping port 27 802.1p
config cos mapping port 27 dscp
config cos mapping port 28 none
config cos mapping port 28 802.1p
config cos mapping port 28 dscp
config cos tos value 0 class 0
config cos tos value 1 class 0
config cos tos value 2 class 0
config cos tos value 3 class 0
config cos tos value 4 class 0
config cos tos value 5 class 0
config cos tos value 6 class 0
config cos tos value 7 class 0
config bandwidth_control 1 rx_rate no_limit tx_rate no_limit
config bandwidth_control 2 rx_rate no_limit tx_rate no_limit
config bandwidth_control 3 rx_rate no_limit tx_rate no_limit
config bandwidth_control 4 rx_rate no_limit tx_rate no_limit
config bandwidth_control 5 rx_rate no_limit tx_rate no_limit
config bandwidth_control 6 rx_rate no_limit tx_rate no_limit
config bandwidth_control 7 rx_rate no_limit tx_rate no_limit
config bandwidth_control 8 rx_rate no_limit tx_rate no_limit
config bandwidth_control 9 rx_rate no_limit tx_rate no_limit
config bandwidth_control 10 rx_rate no_limit tx_rate no_limit
config bandwidth_control 11 rx_rate no_limit tx_rate no_limit
config bandwidth_control 12 rx_rate no_limit tx_rate no_limit
config bandwidth_control 13 rx_rate no_limit tx_rate no_limit
config bandwidth_control 14 rx_rate no_limit tx_rate no_limit
config bandwidth_control 15 rx_rate no_limit tx_rate no_limit
config bandwidth_control 16 rx_rate no_limit tx_rate no_limit
config bandwidth_control 17 rx_rate no_limit tx_rate no_limit
config bandwidth_control 18 rx_rate no_limit tx_rate no_limit
config bandwidth_control 19 rx_rate no_limit tx_rate no_limit
config bandwidth_control 20 rx_rate no_limit tx_rate no_limit
config bandwidth_control 21 rx_rate no_limit tx_rate no_limit
config bandwidth_control 22 rx_rate no_limit tx_rate no_limit
config bandwidth_control 23 rx_rate no_limit tx_rate no_limit
config bandwidth_control 24 rx_rate no_limit tx_rate no_limit
config bandwidth_control 25 rx_rate no_limit tx_rate no_limit
config bandwidth_control 26 rx_rate no_limit tx_rate no_limit
config bandwidth_control 27 rx_rate no_limit tx_rate no_limit
config bandwidth_control 28 rx_rate no_limit tx_rate no_limit

# FDB (forwarding data base)
enable auto learning
config uplink ports 1-28
disable flood_fdb

# Syslog
disable syslog
config log_save_timing on_demand

# ACL

# SNMP
enable snmp
config snmp engineID 4445532d313231
disable snmp authenticate traps
disable snmp system_device_bootup traps
disable snmp fiber_port_link traps
disable snmp twistedpair_port_link traps
disable snmp rstpport_state_change traps
disable snmp firmware_upgrade_state traps
disable snmp port_security_violation traps
disable snmp IMPB_violation traps
disable snmp LBD traps
disable snmp DHCP_screening traps
disable snmp duplicate_IP_detected traps

# port security
config port_security 1 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 2 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 3 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 4 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 5 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 6 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 7 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 8 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 9 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 10 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 11 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 12 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 13 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 14 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 15 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 16 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 17 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 18 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 19 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 20 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 21 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 22 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 23 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 24 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 25 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 26 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 27 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout
config port_security 28 admin_state disable max_learning_addr 0 lock_address_mode DeleteOnTimeout

# MAC address table notification
disable mac_notification
config mac_notification interval 1
config mac_notification historysize 1
config mac_notification ports 1 disable
config mac_notification ports 2 disable
config mac_notification ports 3 disable
config mac_notification ports 4 disable
config mac_notification ports 5 disable
config mac_notification ports 6 disable
config mac_notification ports 7 disable
config mac_notification ports 8 disable
config mac_notification ports 9 disable
config mac_notification ports 10 disable
config mac_notification ports 11 disable
config mac_notification ports 12 disable
config mac_notification ports 13 disable
config mac_notification ports 14 disable
config mac_notification ports 15 disable
config mac_notification ports 16 disable
config mac_notification ports 17 disable
config mac_notification ports 18 disable
config mac_notification ports 19 disable
config mac_notification ports 20 disable
config mac_notification ports 21 disable
config mac_notification ports 22 disable
config mac_notification ports 23 disable
config mac_notification ports 24 disable
config mac_notification ports 25 disable
config mac_notification ports 26 disable
config mac_notification ports 27 disable
config mac_notification ports 28 disable


# DHCP_RELAY
disable dhcp_relay
config dhcp_relay hops 4
config dhcp_relay time 0
config dhcp_relay option_82 state disable
config dhcp_relay option_82 check disable
config dhcp_relay option_82 policy replace
config dhcp_relay option_82 remote_id default
disable dhcp_local_relay
disable dhcp_local_relay
disable dhcp_local_relay

# GVRP
enable gvrp
config gvrp 1 pvid 1
config gvrp 1 state enable
config gvrp 1 ingress_checking enable
config gvrp 1 acceptable_frame All_Frames
config gvrp 2 pvid 1
config gvrp 2 state enable
config gvrp 2 ingress_checking enable
config gvrp 2 acceptable_frame All_Frames
config gvrp 3 pvid 1
config gvrp 3 state enable
config gvrp 3 ingress_checking enable
config gvrp 3 acceptable_frame All_Frames
config gvrp 4 pvid 1
config gvrp 4 state enable
config gvrp 4 ingress_checking enable
config gvrp 4 acceptable_frame All_Frames
config gvrp 5 pvid 1
config gvrp 5 state enable
config gvrp 5 ingress_checking enable
config gvrp 5 acceptable_frame All_Frames
config gvrp 6 pvid 1
config gvrp 6 state enable
config gvrp 6 ingress_checking enable
config gvrp 6 acceptable_frame All_Frames
config gvrp 7 pvid 1
config gvrp 7 state enable
config gvrp 7 ingress_checking enable
config gvrp 7 acceptable_frame All_Frames
config gvrp 8 pvid 1
config gvrp 8 state enable
config gvrp 8 ingress_checking enable
config gvrp 8 acceptable_frame All_Frames
config gvrp 9 pvid 1
config gvrp 9 state enable
config gvrp 9 ingress_checking enable
config gvrp 9 acceptable_frame All_Frames
config gvrp 10 pvid 1
config gvrp 10 state enable
config gvrp 10 ingress_checking enable
config gvrp 10 acceptable_frame All_Frames
config gvrp 11 pvid 1
config gvrp 11 state enable
config gvrp 11 ingress_checking enable
config gvrp 11 acceptable_frame All_Frames
config gvrp 12 pvid 1
config gvrp 12 state enable
config gvrp 12 ingress_checking enable
config gvrp 12 acceptable_frame All_Frames
config gvrp 13 pvid 1
config gvrp 13 state enable
config gvrp 13 ingress_checking enable
config gvrp 13 acceptable_frame All_Frames
config gvrp 14 pvid 1
config gvrp 14 state enable
config gvrp 14 ingress_checking enable
config gvrp 14 acceptable_frame All_Frames
config gvrp 15 pvid 1
config gvrp 15 state enable
config gvrp 15 ingress_checking enable
config gvrp 15 acceptable_frame All_Frames
config gvrp 16 pvid 1
config gvrp 16 state enable
config gvrp 16 ingress_checking enable
config gvrp 16 acceptable_frame All_Frames
config gvrp 17 pvid 1
config gvrp 17 state enable
config gvrp 17 ingress_checking enable
config gvrp 17 acceptable_frame All_Frames
config gvrp 18 pvid 1
config gvrp 18 state enable
config gvrp 18 ingress_checking enable
config gvrp 18 acceptable_frame All_Frames
config gvrp 19 pvid 1
config gvrp 19 state enable
config gvrp 19 ingress_checking enable
config gvrp 19 acceptable_frame All_Frames
config gvrp 20 pvid 1
config gvrp 20 state enable
config gvrp 20 ingress_checking enable
config gvrp 20 acceptable_frame All_Frames
config gvrp 21 pvid 1
config gvrp 21 state enable
config gvrp 21 ingress_checking enable
config gvrp 21 acceptable_frame All_Frames
config gvrp 22 pvid 1
config gvrp 22 state enable
config gvrp 22 ingress_checking enable
config gvrp 22 acceptable_frame All_Frames
config gvrp 23 pvid 1
config gvrp 23 state enable
config gvrp 23 ingress_checking enable
config gvrp 23 acceptable_frame All_Frames
config gvrp 24 pvid 1
config gvrp 24 state enable
config gvrp 24 ingress_checking enable
config gvrp 24 acceptable_frame All_Frames
config gvrp 25 pvid 1
config gvrp 25 state enable
config gvrp 25 ingress_checking enable
config gvrp 25 acceptable_frame All_Frames
config gvrp 26 pvid 1
config gvrp 26 state enable
config gvrp 26 ingress_checking enable
config gvrp 26 acceptable_frame All_Frames
config gvrp 27 pvid 1
config gvrp 27 state enable
config gvrp 27 ingress_checking enable
config gvrp 27 acceptable_frame All_Frames
config gvrp 28 pvid 1
config gvrp 28 state enable
config gvrp 28 ingress_checking enable
config gvrp 28 acceptable_frame All_Frames
config gvrp timer join_timer 200
config gvrp timer leave_timer 600
config gvrp timer leave-all_timer 10000

# Loopback Detection
config loopdetect enable
config loopdetect mode portbase
config loopdetect interval_time 2
config loopdetect lbd_recover_time 60
config loopdetect ports 1 enable
config loopdetect ports 2 enable
config loopdetect ports 3 enable
config loopdetect ports 4 enable
config loopdetect ports 5 enable
config loopdetect ports 6 enable
config loopdetect ports 7 enable
config loopdetect ports 8 enable
config loopdetect ports 9 enable
config loopdetect ports 10 enable
config loopdetect ports 11 enable
config loopdetect ports 12 enable
config loopdetect ports 13 enable
config loopdetect ports 14 enable
config loopdetect ports 15 enable
config loopdetect ports 16 enable
config loopdetect ports 17 enable
config loopdetect ports 18 enable
config loopdetect ports 19 enable
config loopdetect ports 20 enable
config loopdetect ports 21 enable
config loopdetect ports 22 enable
config loopdetect ports 23 enable
config loopdetect ports 24 enable

# BPDU Attack Protection
disable bpdu_protection
config bpdu_protection recovery_timer 60
config bpdu_protection ports 1 state disable mode shutdown
config bpdu_protection ports 2 state disable mode shutdown
config bpdu_protection ports 3 state disable mode shutdown
config bpdu_protection ports 4 state disable mode shutdown
config bpdu_protection ports 5 state disable mode shutdown
config bpdu_protection ports 6 state disable mode shutdown
config bpdu_protection ports 7 state disable mode shutdown
config bpdu_protection ports 8 state disable mode shutdown
config bpdu_protection ports 9 state disable mode shutdown
config bpdu_protection ports 10 state disable mode shutdown
config bpdu_protection ports 11 state disable mode shutdown
config bpdu_protection ports 12 state disable mode shutdown
config bpdu_protection ports 13 state disable mode shutdown
config bpdu_protection ports 14 state disable mode shutdown
config bpdu_protection ports 15 state disable mode shutdown
config bpdu_protection ports 16 state disable mode shutdown
config bpdu_protection ports 17 state disable mode shutdown
config bpdu_protection ports 18 state disable mode shutdown
config bpdu_protection ports 19 state disable mode shutdown
config bpdu_protection ports 20 state disable mode shutdown
config bpdu_protection ports 21 state disable mode shutdown
config bpdu_protection ports 22 state disable mode shutdown
config bpdu_protection ports 23 state disable mode shutdown
config bpdu_protection ports 24 state disable mode shutdown
config bpdu_protection ports 25 state disable mode shutdown
config bpdu_protection ports 26 state disable mode shutdown
config bpdu_protection ports 27 state disable mode shutdown
config bpdu_protection ports 28 state disable mode shutdown
config bpdu_protection trap none
config bpdu_protection log none

# SMTP
disable smtp
config smtp server 0.0.0.0 server_port 25

# traffic control
config traffic trap none
config traffic control 1 broadcast disable multicast disable unicast disable action drop
config traffic control 2 broadcast disable multicast disable unicast disable action drop
config traffic control 3 broadcast disable multicast disable unicast disable action drop
config traffic control 4 broadcast disable multicast disable unicast disable action drop
config traffic control 5 broadcast disable multicast disable unicast disable action drop
config traffic control 6 broadcast disable multicast disable unicast disable action drop
config traffic control 7 broadcast disable multicast disable unicast disable action drop
config traffic control 8 broadcast disable multicast disable unicast disable action drop
config traffic control 9 broadcast disable multicast disable unicast disable action drop
config traffic control 10 broadcast disable multicast disable unicast disable action drop
config traffic control 11 broadcast disable multicast disable unicast disable action drop
config traffic control 12 broadcast disable multicast disable unicast disable action drop
config traffic control 13 broadcast disable multicast disable unicast disable action drop
config traffic control 14 broadcast disable multicast disable unicast disable action drop
config traffic control 15 broadcast disable multicast disable unicast disable action drop
config traffic control 16 broadcast disable multicast disable unicast disable action drop
config traffic control 17 broadcast disable multicast disable unicast disable action drop
config traffic control 18 broadcast disable multicast disable unicast disable action drop
config traffic control 19 broadcast disable multicast disable unicast disable action drop
config traffic control 20 broadcast disable multicast disable unicast disable action drop
config traffic control 21 broadcast disable multicast disable unicast disable action drop
config traffic control 22 broadcast disable multicast disable unicast disable action drop
config traffic control 23 broadcast disable multicast disable unicast disable action drop
config traffic control 24 broadcast disable multicast disable unicast disable action drop
config traffic control 25 broadcast disable multicast disable unicast disable action drop
config traffic control 26 broadcast disable multicast disable unicast disable action drop
config traffic control 27 broadcast disable multicast disable unicast disable action drop
config traffic control 28 broadcast disable multicast disable unicast disable action drop

# RMON
disable rmon

# ISM vlan
enable igmp_snooping multicast_vlan
create igmp_snooping multicast_vlan iptv 4050
config igmp_snooping multicast_vlan iptv add member_port 1-26
config igmp_snooping multicast_vlan iptv add source_port 28
config igmp_snooping multicast_vlan iptv state enable replace_source_ip 172.16.0.105
config igmp_snooping multicast_vlan_group iptv add 239.0.71.1 - 239.0.100.254

# IGMP snooping
enable igmp_snooping
config igmp_snooping default router_timeout 125 host_timeout 260 leave_timer 1
config igmp_snooping robustness_variable 2
config igmp_snooping query_interval 125
config igmp_snooping max_response_time 10
config igmp_snooping data_driven_learning max_learned_entry 256
config igmp_snooping vlan_name default state disable fast_leave disable
config igmp_snooping data_driven_learning vlan_name default disable
config igmp_snooping querier vlan default state disable
config igmp_snooping vlan_name v_adm state disable fast_leave disable
config igmp_snooping data_driven_learning vlan_name v_adm disable
config igmp_snooping querier vlan v_adm state disable
config igmp_snooping vlan_name iptv state enable fast_leave enable
config igmp_snooping data_driven_learning vlan_name iptv disable
config igmp_snooping querier vlan iptv state disable
config igmp access_authentication ports 1 state enable
config igmp access_authentication ports 2 state enable
config igmp access_authentication ports 3 state enable
config igmp access_authentication ports 4 state enable
config igmp access_authentication ports 5 state enable
config igmp access_authentication ports 6 state enable
config igmp access_authentication ports 7 state enable
config igmp access_authentication ports 8 state enable
config igmp access_authentication ports 9 state enable
config igmp access_authentication ports 10 state enable
config igmp access_authentication ports 11 state enable
config igmp access_authentication ports 12 state enable
config igmp access_authentication ports 13 state enable
config igmp access_authentication ports 14 state enable
config igmp access_authentication ports 15 state enable
config igmp access_authentication ports 16 state enable
config igmp access_authentication ports 17 state enable
config igmp access_authentication ports 18 state enable
config igmp access_authentication ports 19 state enable
config igmp access_authentication ports 20 state enable
config igmp access_authentication ports 21 state enable
config igmp access_authentication ports 22 state enable
config igmp access_authentication ports 23 state enable
config igmp access_authentication ports 24 state enable
config igmp access_authentication ports 25 state disable
config igmp access_authentication ports 26 state disable
config igmp access_authentication ports 27 state disable
config igmp access_authentication ports 28 state disable

# 8021X
enable 802.1x
config 802.1x auth_mode port_based
config 802.1x auth_protocol local
config 802.1x capability ports 1 none
config 802.1x auth_parameter ports 1 port_control force_auth
config 802.1x auth_parameter ports 1 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 2 none
config 802.1x auth_parameter ports 2 port_control force_auth
config 802.1x auth_parameter ports 2 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 3 none
config 802.1x auth_parameter ports 3 port_control force_auth
config 802.1x auth_parameter ports 3 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 4 none
config 802.1x auth_parameter ports 4 port_control force_auth
config 802.1x auth_parameter ports 4 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 5 none
config 802.1x auth_parameter ports 5 port_control force_auth
config 802.1x auth_parameter ports 5 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 6 none
config 802.1x auth_parameter ports 6 port_control force_auth
config 802.1x auth_parameter ports 6 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 7 none
config 802.1x auth_parameter ports 7 port_control force_auth
config 802.1x auth_parameter ports 7 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 8 none
config 802.1x auth_parameter ports 8 port_control force_auth
config 802.1x auth_parameter ports 8 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 9 none
config 802.1x auth_parameter ports 9 port_control force_auth
config 802.1x auth_parameter ports 9 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 10 none
config 802.1x auth_parameter ports 10 port_control force_auth
config 802.1x auth_parameter ports 10 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 11 none
config 802.1x auth_parameter ports 11 port_control force_auth
config 802.1x auth_parameter ports 11 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 12 none
config 802.1x auth_parameter ports 12 port_control force_auth
config 802.1x auth_parameter ports 12 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 13 none
config 802.1x auth_parameter ports 13 port_control force_auth
config 802.1x auth_parameter ports 13 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 14 none
config 802.1x auth_parameter ports 14 port_control force_auth
config 802.1x auth_parameter ports 14 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 15 none
config 802.1x auth_parameter ports 15 port_control force_auth
config 802.1x auth_parameter ports 15 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 16 none
config 802.1x auth_parameter ports 16 port_control force_auth
config 802.1x auth_parameter ports 16 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 17 none
config 802.1x auth_parameter ports 17 port_control force_auth
config 802.1x auth_parameter ports 17 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 18 none
config 802.1x auth_parameter ports 18 port_control force_auth
config 802.1x auth_parameter ports 18 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 19 none
config 802.1x auth_parameter ports 19 port_control force_auth
config 802.1x auth_parameter ports 19 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 20 none
config 802.1x auth_parameter ports 20 port_control force_auth
config 802.1x auth_parameter ports 20 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 21 none
config 802.1x auth_parameter ports 21 port_control force_auth
config 802.1x auth_parameter ports 21 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 22 none
config 802.1x auth_parameter ports 22 port_control force_auth
config 802.1x auth_parameter ports 22 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 23 none
config 802.1x auth_parameter ports 23 port_control force_auth
config 802.1x auth_parameter ports 23 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 24 none
config 802.1x auth_parameter ports 24 port_control force_auth
config 802.1x auth_parameter ports 24 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 25 none
config 802.1x auth_parameter ports 25 port_control force_auth
config 802.1x auth_parameter ports 25 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 26 none
config 802.1x auth_parameter ports 26 port_control force_auth
config 802.1x auth_parameter ports 26 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 27 none
config 802.1x auth_parameter ports 27 port_control force_auth
config 802.1x auth_parameter ports 27 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config 802.1x capability ports 28 none
config 802.1x auth_parameter ports 28 port_control force_auth
config 802.1x auth_parameter ports 28 direction both quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable
config radius add 1 10.10.0.1 key secret auth_port 1812 acct_port 1813 timeout 5 retransmit 2

# port mirroring


# SSL
disable ssl ciphersuite RSA-NULL-MD5 RSA-NULL-SHA1 RSA-DES-SHA1 RSA-3DES-SHA1 DH-RSA-DES-SHA1 DH-RSA-3DES-SHA1 RSA-EXP1024-DES-SHA1

# SSH
enable ssh
config ssh server authfail 2
config ssh server rekey 60min
config ssh server maxsession 1
config ssh server contimeout 120
config ssh authmode password enable
config ssh authmode publickey disable
config ssh authmode hostbased disable
config ssh algorithm 3DES enable
config ssh algorithm MD5 enable
config ssh algorithm SHA1 enable
config ssh algorithm RSA disable
config ssh algorithm RSA disable

# access authentication control
disable authen_policy
config authen parameter response_timeout 30
config authen parameter attempt 3
config authen application console login method_list_name default
config authen application telnet login method_list_name default
config authen application ssh login method_list_name default
config authen application http login method_list_name default
config authen application console enable method_list_name default
config authen application telnet enable method_list_name default
config authen application ssh enable method_list_name default
config authen application http enable method_list_name default
create authen server_group tacacs+
create authen server_group radius
create authen_login method_list_name default
config authen_login default method local
create authen_enable method_list_name default
config authen_enable default method local

# safeguard_engine
config safeguard_engine state disable


# LACP
config link_aggregation state disable
config link_aggregation algorithm mac_source_dest
config lacp port_priority 1 128 timeout long
config lacp port_priority 2 128 timeout long
config lacp port_priority 3 128 timeout long
config lacp port_priority 4 128 timeout long
config lacp port_priority 5 128 timeout long
config lacp port_priority 6 128 timeout long
config lacp port_priority 7 128 timeout long
config lacp port_priority 8 128 timeout long
config lacp port_priority 9 128 timeout long
config lacp port_priority 10 128 timeout long
config lacp port_priority 11 128 timeout long
config lacp port_priority 12 128 timeout long
config lacp port_priority 13 128 timeout long
config lacp port_priority 14 128 timeout long
config lacp port_priority 15 128 timeout long
config lacp port_priority 16 128 timeout long
config lacp port_priority 17 128 timeout long
config lacp port_priority 18 128 timeout long
config lacp port_priority 19 128 timeout long
config lacp port_priority 20 128 timeout long
config lacp port_priority 21 128 timeout long
config lacp port_priority 22 128 timeout long
config lacp port_priority 23 128 timeout long
config lacp port_priority 24 128 timeout long
config lacp port_priority 25 128 timeout long
config lacp port_priority 26 128 timeout long
config lacp port_priority 27 128 timeout long
config lacp port_priority 28 128 timeout long
config limited_multicast_addr ports 1 access permit
config max_mcast_group ports 1 max_group 256
config limited_multicast_addr ports 2 access permit
config max_mcast_group ports 2 max_group 256
config limited_multicast_addr ports 3 access permit
config max_mcast_group ports 3 max_group 256
config limited_multicast_addr ports 4 access permit
config max_mcast_group ports 4 max_group 256
config limited_multicast_addr ports 5 access permit
config max_mcast_group ports 5 max_group 256
config limited_multicast_addr ports 6 access permit
config max_mcast_group ports 6 max_group 256
config limited_multicast_addr ports 7 access permit
config max_mcast_group ports 7 max_group 256
config limited_multicast_addr ports 8 access permit
config max_mcast_group ports 8 max_group 256
config limited_multicast_addr ports 9 access permit
config max_mcast_group ports 9 max_group 256
config limited_multicast_addr ports 10 access permit
config max_mcast_group ports 10 max_group 256
config limited_multicast_addr ports 11 access permit
config max_mcast_group ports 11 max_group 256
config limited_multicast_addr ports 12 access permit
config max_mcast_group ports 12 max_group 256
config limited_multicast_addr ports 13 access permit
config max_mcast_group ports 13 max_group 256
config limited_multicast_addr ports 14 access permit
config max_mcast_group ports 14 max_group 256
config limited_multicast_addr ports 15 access permit
config max_mcast_group ports 15 max_group 256
config limited_multicast_addr ports 16 access permit
config max_mcast_group ports 16 max_group 256
config limited_multicast_addr ports 17 access permit
config max_mcast_group ports 17 max_group 256
config limited_multicast_addr ports 18 access permit
config max_mcast_group ports 18 max_group 256
config limited_multicast_addr ports 19 access permit
config max_mcast_group ports 19 max_group 256
config limited_multicast_addr ports 20 access permit
config max_mcast_group ports 20 max_group 256
config limited_multicast_addr ports 21 access permit
config max_mcast_group ports 21 max_group 256
config limited_multicast_addr ports 22 access permit
config max_mcast_group ports 22 max_group 256
config limited_multicast_addr ports 23 access permit
config max_mcast_group ports 23 max_group 256
config limited_multicast_addr ports 24 access permit
config max_mcast_group ports 24 max_group 256
config limited_multicast_addr ports 25 access permit
config max_mcast_group ports 25 max_group 256
config limited_multicast_addr ports 26 access permit
config max_mcast_group ports 26 max_group 256
config limited_multicast_addr ports 27 access permit
config max_mcast_group ports 27 max_group 256
config limited_multicast_addr ports 28 access permit
config max_mcast_group ports 28 max_group 256
config dos_prevention dos_type land_attack action drop disable
config dos_prevention dos_type blat_attack action drop disable
config dos_prevention dos_type smurf_attack action drop disable
config dos_prevention dos_type tcp_null_scan action drop disable
config dos_prevention dos_type tcp_xmascan action drop disable
config dos_prevention dos_type tcp_synfin action drop disable
config dos_prevention dos_type tcp_syn_srcport_less_1024 action drop disable
disable password encryption