ITC/3AV WIKI

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
  #
   version 5.20, Release 1211
  #
   sysname S5800_ENTERPRISE_NAME
  #
   clock timezone GMT-5 minus 05:00:00 
  #
   undo password-control aging enable 
   undo password-control length enable 
   undo password-control history enable 
   password-control login-attempt 3 exceed lock-time 120
  #
   dhcp relay server-group 1 ip 10.1.141.25
   dhcp relay server-group 1 ip 10.1.141.132
   dhcp relay server-detect
  #
   irf mac-address persistent timer
   irf auto-update enable
   undo irf link-delay
  #
   domain default enable ENTERPRISE NAME 
  #
   router id 10.134.182.0 
   ip ttl-expires enable
   ip unreachables enable
  #
   undo ip http enable 
  #
   multicast routing-enable
  #
  acl number 2000 name 
   rule 0 permit source 192.168.3.253 0 
   rule 1 permit source 10.1.141.21 0 
   rule 2 permit source 10.1.141.23 0 
   rule 3 permit source 10.1.141.196 0 
   rule 4 permit source 128.1.245.14 0 
   rule 5 permit source 10.1.42.14 0 
   rule 6 permit source 10.11.26.120 0 
   rule 7 permit source 10.11.26.121 0 
   rule 8 permit source 10.11.26.122 0 
   rule 9 permit source 10.11.26.123 0 
   rule 10 permit source 10.11.26.100 0 
   rule 11 permit source 10.11.26.101 0 
  #
  vlan 1
  #
  vlan 2
   name 
  #
  vlan 5
   name 
  #
  vlan 120
   name 
  #
  vlan 700
   name 
  #
  vlan 710
   name 
  #
  vlan 730
   name 
  #
  vlan 740
   name 
  #
  vlan 760
   name
  #
  vlan 761
   name
  #
  vlan 762
   name
  #
  vlan 763
   name 
  #
  vlan 764
   name 
  #
  radius scheme system
   server-type extended
   primary authentication 127.0.0.1 1645
   primary accounting 127.0.0.1 1646
   user-name-format without-domain
   radius scheme ENTERPRISE NAME
   server-type extended
   primary authentication 128.1.5.115
   primary accounting 128.1.5.115
   key authentication 4uth3nt1c4t10n
   key accounting 4aac0unt1ng
   user-name-format without-domain
   nas-ip 10.134.182.0
  #
  domain ENTERPRISE NAME 
   authentication default radius-scheme ENTERPRISE NAME
   authentication login radius-scheme ENTERPRISE NAME
   authorization login radius-scheme ENTERPRISE NAME
   authentication lan-access radius-scheme ENTERPRISE NAME
   authorization lan-access radius-scheme ENTERPRISE NAME
   access-limit disable 
   state active 
   idle-cut disable 
   self-service-url disable 
   domain system 
   access-limit disable 
   state active 
   idle-cut disable 
   self-service-url disable 
  #
  user-group system
  #
  local-user admin
   password cipher R'A+R<ZO]]Y+L7<J]HEQ:A!!
   authorization-attribute level 3
   service-type ssh telnet terminal
   service-type ftp
  #
   stp bpdu-protection
   stp pathcost-standard dot1t
   stp enable
   stp region-configuration
   region-name ENTERPRISE NAME
   revision-level 1
   instance 1 vlan 700 to 729 
   instance 2 vlan 730 to 759 
   instance 3 vlan 760 
   instance 4 vlan 761 
   instance 5 vlan 762 
   instance 6 vlan 763 
   instance 7 vlan 764 
   instance 8 vlan 400 to 499 
   instance 9 vlan 500 to 599 
   active region-configuration
  #
   interface NULL0
  #
   interface LoopBack0
   ip address 10.134.182.0 255.255.255.255 
  #
  interface Vlan-interface1
   ip address 192.168.77.4 255.255.255.224 
  #
  interface GigabitEthernet1/0/1
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/2
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/3
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/4
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/5
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/6
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/7
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/8
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/9
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/10
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/11
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/12
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/13
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/14
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/15
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/16
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/17
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/18
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/19
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/20
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/21
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/22
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/23
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/24
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/25
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/26
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/27
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/28
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/29
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/30
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/31
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/32
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/33
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/34
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/35
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/36
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/37
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/38
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/39
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/40
   port link-mode bridge
   description Access Point
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/41
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/42
   port link-mode bridge
   description Access Point
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/43
   port link-mode bridge
   description Access Point
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/44
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/45
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/46
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/47
   port link-mode bridge
   port link-type hybrid
   port hybrid vlan 120 tagged
   port hybrid vlan 1 untagged
   stp edged-port enable
  #
  interface GigabitEthernet1/0/48
   port link-mode bridge
   port link-type trunk
   port trunk permit vlan all
  #
  interface Ten-GigabitEthernet1/0/49
   port link-mode bridge
  #
  interface Ten-GigabitEthernet1/0/50
   port link-mode bridge
  #
  interface Ten-GigabitEthernet1/0/51
   port link-mode bridge
  #
  interface Ten-GigabitEthernet1/0/52
   port link-mode bridge
   port link-type trunk
   port trunk permit vlan all
  #
   ip route-static 0.0.0.0 0.0.0.0 192.168.77.1
  #
   info-center loghost 10.11.26.100
   info-center logbuffer size 100
   info-center trapbuffer size 100
  #
   snmp-agent
   snmp-agent local-engineid 800063A2033822D6B383E2
   snmp-agent community write igu4n4 acl 2000 
   snmp-agent community read petrole0 acl 2000 
   snmp-agent log all
   snmp-agent sys-info contact Engineer name
   snmp-agent sys-info location Enterprise name
   snmp-agent sys-info version v3
   snmp-agent group v3 IMC write-view ViewDefault acl 2000
   snmp-agent group v3 Magestad read-view Magestad acl 2000
   snmp-agent target-host trap address udp-domain 10.1.141.196 params securityname petr0le0 v3 
   snmp-agent target-host trap address udp-domain 10.1.141.23 params securityname petr0le0 v3 
   snmp-agent target-host trap address udp-domain 10.11.26.100 params securityname petr0le0 v3 
   snmp-agent target-host trap address udp-domain 10.11.26.120 params securityname petr0le0 v3 
   snmp-agent target-host trap address udp-domain 10.11.26.121 params securityname petr0le0 v3 
   snmp-agent target-host trap address udp-domain 10.11.26.122 params securityname petr0le0 v3 
   snmp-agent target-host trap address udp-domain 10.11.26.123 params securityname petr0le0 v3 
   snmp-agent mib-view included Magestad system 
   snmp-agent usm-user v3 IMC IMC authentication-mode md5 #</9$-DS-)LUa$`*7%+1NQ!! privacy-mode 3des #</9$-DS-)LUa$`*7%+1N_J= acl 2000
   snmp-agent usm-user v3 Magestad Magestad authentication-mode md5 G$_H33:I-R1HVA-KR-<1C!!! privacy-mode 3des G$_H33:I-R1HVA-KR-<1C&PA acl 2000
   snmp-agent trap source LoopBack0
  #
  header shell %************************************ATENTION************************************
  * Computer unit supported by I.T.Corporation.                                                 *
  * This is a computer resource for the exclusive use of Enterprise Name.                       *
  * If you are not an authorized user to enter this device                                      *
  * refrain from doing so, as all activities can be monitored                                   *
  * or recorded. And if evidence of unauthorized access is discovered,                          *
  * modifications to the information, attacks against the integrity of the                      *
  * Information such as the entity, among others, will be reported to the                       *
  * competent authorities.                                                                      *
  ***********************************************************************************************
  # 
  header shell %************************************ATENTION************************************
  * Computer unit supported by I.T.Corporation.                                                 *
  * This is a computer resource for the exclusive use of Enterprise Name.                       *
  * If you are not an authorized user to enter this device                                      *
  * refrain from doing so, as all activities can be monitored                                   *
  * or recorded. And if evidence of unauthorized access is discovered,                          *
  * modifications to the information, attacks against the integrity of the                      *
  * Information such as the entity, among others, will be reported to the                       *
  * competent authorities.                                                                      *
  ***********************************************************************************************
  #
  %
  #
   dhcp enable 
  #
   ntp-service unicast-server 137.1.2.3
  #
   ssh server enable
   ssh client source interface LoopBack0
   ssh user admin service-type all authentication-type password
  #
    arp source-suppression enable
    gratuitous-arp-sending enable
    arp anti-attack valid-check enable
  #
   load xml-configuration 
  #
   load tr069-configuration
  #
  user-interface aux 0
   authentication-mode scheme
   history-command max-size 256
   user-interface vty 0 15
   authentication-mode scheme
   history-command max-size 256
  #
  return