Command: show switch

Device Type : DES-3528 Fast Ethernet Switch
MAC Address : F0-7D-68-1C-06-C0
IP Address : 172.31.173.243 (Manual)
VLAN Name : default
Subnet Mask : 255.255.255.248
Default Gateway : 172.31.173.241
Boot PROM Version : Build 1.00.B008
Firmware Version : Build 3.00.B034
Hardware Version : A4
Serial Number : PVIH2A9001542
System Name :
System Location :
System Uptime : 6 days, 6 hours, 51 minutes, 51 seconds
System Contact :
Spanning Tree : Disabled
GVRP : Disabled
IGMP Snooping : Disabled
MLD Snooping : Disabled
VLAN Trunk : Disabled
Telnet : Enabled (TCP 23)
Web : Enabled (TCP 80)
SNMP : Disabled
SSL Status : Disabled
SSH Status : Disabled
802.1x : Disabled
Jumbo Frame : Off
CLI Paging : Enabled
MAC Notification : Disabled
Port Mirror : Disabled
SNTP : Disabled
HOL Prevention State : Enabled
Syslog Global State : Disabled
Single IP Management : Disabled
Dual Image : Supported
Password Encryption Status : Disabled

# VLAN

enable pvid auto_assign
config vlan default delete 1-28
config vlan default add untagged 25-28
config vlan default add forbidden 1-24
config vlan default advertisement disable
create vlan LOCAL_HN_STB tag 2511
config vlan LOCAL_HN_STB add tagged 25-28
config vlan LOCAL_HN_STB add untagged 1-24 advertisement disable
disable gvrp
config gvrp nni_bpdu_addr dot1d
disable asymmetric_vlan
disable vlan_trunk
config port_vlan 1-24 gvrp_state disable ingress_checking enable acceptable_frame admit_all pvid 2511
config port_vlan 25-28 gvrp_state disable ingress_checking disable acceptable_frame admit_all pvid 1

# IGMP_MULTICAST_VLAN

enable igmp_snooping multicast_vlan
config igmp_snooping multicast_vlan forward_unmatched disable
create igmp_snooping multicast_vlan IPTV 889
config igmp_snooping multicast_vlan IPTV state enable replace_source_ip 0.0.0.0
config igmp_snooping multicast_vlan IPTV add member_port 1-24
config igmp_snooping multicast_vlan IPTV add source_port 25-28


#CPU Interface Filter

create cpu access_profile profile_id 4 ip destination_ip_mask 240.0.0.0
config cpu access_profile profile_id 4 add access_id 1 ip destination_ip 224.0.0.0 port 1-28 deny # блокируем любому multicast траффику доступ к cpu
enable cpu_interface_filtering


# IP

config ipif System ipaddress 172.31.173.243/29 vlan default
config ipif System proxy_arp disable local disable
config ipif System dhcpv6_client disable
config ipif System dhcp_option12 state disable
disable autoconfig


# ROUTE

enable local_route ipv4
disable local_route ipv6
create iproute default 172.31.173.241 1 primary

Command: show utilization ports

Port TX/sec RX/sec Util Port TX/sec RX/sec Util
----- ---------- ---------- ---- ----- ---------- ---------- ----
1 7 4242 26

Command: show utilization cpu

CPU Utilization
-------------------------------------------------------------------------------
Five seconds - 59 % One minute - 53 % Five minutes - 23 %

Command: show utilization ports

Port TX/sec RX/sec Util Port TX/sec RX/sec Util
----- ---------- ---------- ---- ----- ---------- ---------- ----
1 18 4260 26

Command: show utilization cpu

CPU Utilization
-------------------------------------------------------------------------------
Five seconds - 6 % One minute - 17 % Five minutes - 33 %

# MULTICAST_FILTER

create mcast_filter_profile profile_id 1 profile_name range_permit
config mcast_filter_profile profile_id 1 add 239.191.254.0-239.191.254.255
config limited_multicast_addr ports 1 add profile_id 1
config max_mcast_group ports 1 max_group 3
config limited_multicast_addr ports 2 add profile_id 1
config max_mcast_group ports 2 max_group 3
config limited_multicast_addr ports 3 add profile_id 1
config max_mcast_group ports 3 max_group 3
config limited_multicast_addr ports 4 add profile_id 1
config max_mcast_group ports 4 max_group 3
config limited_multicast_addr ports 5 add profile_id 1
config max_mcast_group ports 5 max_group 3
config limited_multicast_addr ports 6 add profile_id 1
config max_mcast_group ports 6 max_group 3
config limited_multicast_addr ports 7 add profile_id 1
config max_mcast_group ports 7 max_group 3
config limited_multicast_addr ports 8 add profile_id 1
config max_mcast_group ports 8 max_group 3
config limited_multicast_addr ports 9 add profile_id 1
config max_mcast_group ports 9 max_group 3
config limited_multicast_addr ports 10 add profile_id 1
config max_mcast_group ports 10 max_group 3
config limited_multicast_addr ports 11 add profile_id 1
config max_mcast_group ports 11 max_group 3
config limited_multicast_addr ports 12 add profile_id 1
config max_mcast_group ports 12 max_group 3
config limited_multicast_addr ports 13 add profile_id 1
config max_mcast_group ports 13 max_group 3
config limited_multicast_addr ports 14 add profile_id 1
config max_mcast_group ports 14 max_group 3
config limited_multicast_addr ports 15 add profile_id 1
config max_mcast_group ports 15 max_group 3
config limited_multicast_addr ports 16 add profile_id 1
config max_mcast_group ports 16 max_group 3
config limited_multicast_addr ports 17 add profile_id 1
config max_mcast_group ports 17 max_group 3
config limited_multicast_addr ports 18 add profile_id 1
config max_mcast_group ports 18 max_group 3
config limited_multicast_addr ports 19 add profile_id 1
config max_mcast_group ports 19 max_group 3
config limited_multicast_addr ports 20 add profile_id 1
config max_mcast_group ports 20 max_group 3
config limited_multicast_addr ports 21 add profile_id 1
config max_mcast_group ports 21 max_group 3
config limited_multicast_addr ports 22 add profile_id 1
config max_mcast_group ports 22 max_group 3
config limited_multicast_addr ports 23 add profile_id 1
config max_mcast_group ports 23 max_group 3
config limited_multicast_addr ports 24 add profile_id 1
config max_mcast_group ports 24 max_group 3



# MCFILTER

config multicast vlan_filtering_mode vlanid 1 filter_unregistered_groups
config multicast vlan_filtering_mode vlanid 889 filter_unregistered_groups
config multicast vlan_filtering_mode vlanid 2511 filter_unregistered_groups


# ACL

create access_profile profile_id 1 profile_name deny_multicast ip destination_ip_mask 240.0.0.0
config access_profile profile_id 1 add access_id 1 ip destination_ip 224.0.0.0 port 1-28 deny