#
 version 5.20 Release 2202, Release 2202
#
 sysname name
#
 super password level 1 simple 1234567890
 super password level 2 simple 1234567890
 super password level 3 simple 1234567890
#
 irf mac-address persistent timer
 irf auto-update enable
 undo irf link-delay
#
 domain default enable system
#
 telnet server enable
#
 undo ip ttl-expires
#
 undo cluster enable
#
igmp-snooping
#
vlan 1
 description Default
 name Default
 igmp-snooping enable
#
vlan 32
 description Devices
 name Devices
 igmp-snooping enable
#
vlan 34
 description Wireless
 name Wireless
 igmp-snooping enable
#
vlan 36
 description Servers
 name Servers
 igmp-snooping enable
#
vlan 38
 description Usuarios
 name Usuarios
 igmp-snooping enable
#
vlan 40
 description Printers
 name Printers
 igmp-snooping enable
#
vlan 42
 description VoIP
 name VoIP
 igmp-snooping enable
#
vlan 44
 description CCTV
 name CCTV
 igmp-snooping enable
#
vlan 46
 description DMZ
 name DMZ
 igmp-snooping enable
#
vlan 48
 description Internet1
 name Internet1
 igmp-snooping enable
#
vlan 50
 description Internet2
 name Internet2
 igmp-snooping enable
#
vlan 52
 description Cuarentena
 name Cuarentena
 igmp-snooping enable
#
vlan 54
 description Radius-LAN
 name Radius-LAN
 igmp-snooping enable
#
vlan 56
 description INT VLAN 1 Default
 name Radius-UTM
 igmp-snooping enable
#
vlan 58
 description Pretoria
 name Pretoria
 igmp-snooping enable
#
radius scheme system
 server-type extended
 primary authentication 127.0.0.1 1645
 primary accounting 127.0.0.1 1646
 user-name-format without-domain
#
domain system
 access-limit disable
 state active
 idle-cut disable
 self-service-url disable
#
user-group system
#
local-user admin
 password simple 1234567890
 authorization-attribute level 3
 service-type lan-access
 service-type ssh telnet terminal
 local-user manager
 password simple 1234567890
 authorization-attribute level 2
 service-type lan-access
 service-type ssh telnet terminal
local-user monitor
 password simple S4nl0r3nz0
 authorization-attribute level 1
 service-type lan-access
 service-type telnet
#
 stp disable
#
interface Bridge-Aggregation1
 description name
 port link-type trunk
 port trunk permit vlan all
 link-aggregation mode dynamic
#
interface NULL0
#
interface Vlan-interface1
#
interface Vlan-interface32
 description VLAN 32 Devices
 ip address 10.245.32.27 255.255.255.0
# 
interface GigabitEthernet1/0/1
 description name
 port access vlan 32
 broadcast-suppression pps 3000
 poe enable
#
interface GigabitEthernet1/0/2
 port link-type trunk
 undo port trunk permit vlan 1
 port trunk permit vlan 38 42
 port trunk pvid vlan 38
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/3
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 42 tagged
 port hybrid vlan 38 untagged
 port hybrid pvid vlan 38
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/4
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 42 tagged
 port hybrid vlan 38 untagged
 port hybrid pvid vlan 38
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/5
 port access vlan 38
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/6
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 42 tagged
 port hybrid vlan 38 untagged
 port hybrid pvid vlan 38
 broadcast-suppression pps 3000
 poe enable
 poe priority high
 stp edged-port enable
#
interface GigabitEthernet1/0/7
 description name
 port link-type trunk
 undo port trunk permit vlan 1
 port trunk permit vlan 34
 port trunk pvid vlan 34
 broadcast-suppression pps 3000
 poe enable
#
interface GigabitEthernet1/0/8
 description name
 port access vlan 32
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/9
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 42 tagged
 port hybrid vlan 38 untagged
 port hybrid pvid vlan 38
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/10
 description name
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 42 tagged
 port hybrid vlan 38 untagged
 port hybrid pvid vlan 38
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/11
 description name
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 42 tagged
 port hybrid vlan 38 untagged
 port hybrid pvid vlan 38
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/12
 port access vlan 44
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/13
 port access vlan 40
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/14
 port access vlan 40
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/15
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 42 tagged
 port hybrid vlan 38 untagged
 port hybrid pvid vlan 38
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/16
 description name
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 40 untagged
 port hybrid pvid vlan 40
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/17
 port access vlan 38
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/18
 description name
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 42 tagged
 port hybrid vlan 38 untagged
 port hybrid pvid vlan 38
 broadcast-suppression pps 3000
 poe enable
#
interface GigabitEthernet1/0/19
 description name
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 42 tagged
 port hybrid vlan 38 untagged
 port hybrid pvid vlan 38
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/20
 description name
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 40 untagged
 port hybrid pvid vlan 40
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/21
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 44 untagged
 port hybrid pvid vlan 44
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/22
 port access vlan 44
 broadcast-suppression pps 3000
 poe enable
 stp edged-port enable
#
interface GigabitEthernet1/0/23
 description name
 port link-type trunk
 port trunk permit vlan all
 broadcast-suppression pps 3000
 port link-aggregation group 1
# 
interface GigabitEthernet1/0/24
 description name
 port link-type trunk
 port trunk permit vlan all
 broadcast-suppression pps 3000
 port link-aggregation group 1
#
interface GigabitEthernet1/0/25
 port access vlan 38
 shutdown
 broadcast-suppression pps 3000
 stp edged-port enable
#
interface GigabitEthernet1/0/26
 port access vlan 44
 shutdown
 broadcast-suppression pps 3000
 stp edged-port enable
#  
interface GigabitEthernet1/0/27
 port link-type trunk
 port trunk permit vlan all
 shutdown
 broadcast-suppression pps 3000
 stp edged-port enable
#
interface GigabitEthernet1/0/28
 port link-type trunk
 port trunk permit vlan all
 shutdown
 broadcast-suppression pps 3000
 stp edged-port enable
#
 ip route-static 0.0.0.0 0.0.0.0 10.245.32.1
#
 snmp-agent
 snmp-agent local-engineid 8000002B000FCBB87D406877
 snmp-agent community write public
 snmp-agent community write private
 snmp-agent sys-info contact Ingeniero de Infraestructura
 snmp-agent sys-info location CCAdministracion
 snmp-agent sys-info version all
 snmp-agent group v3 managev3group write-view internet
 snmp-agent mib-view included internet internet
 snmp-agent usm-user v3 managev3user managev3group
#
header shell %************************************ATENTION************************************
* Computer unit supported by I.T.Corporation.                                                 *
* This is a computer resource for the exclusive use of Enterprise Name.                       *
* If you are not an authorized user to enter this device                                      *
* refrain from doing so, as all activities can be monitored                                   *
* or recorded. And if evidence of unauthorized access is discovered,                          *
* modifications to the information, attacks against the integrity of the                      *
* Information such as the entity, among others, will be reported to the                       *
* competent authorities.                                                                      *
***********************************************************************************************
 %
header shell %************************************ATENTION************************************
* Computer unit supported by I.T.Corporation.                                                 *
* This is a computer resource for the exclusive use of Enterprise Name.                       *
* If you are not an authorized user to enter this device                                      *
* refrain from doing so, as all activities can be monitored                                   *
* or recorded. And if evidence of unauthorized access is discovered,                          *
* modifications to the information, attacks against the integrity of the                      *
* Information such as the entity, among others, will be reported to the                       *
* competent authorities.                                                                      *
***********************************************************************************************
%
#
 ssh server enable
 ssh user admin service-type all authentication-type password
#
user-interface aux 0 7
authentication-mode scheme
screen-length 22
user-interface aux 8
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
set authentication password simple 1234567890
idle-timeout 60 0
protocol inbound ssh
#
return