# version 5.20, Release 1211 # sysname S5800_ENTERPRISE_NAME # clock timezone GMT-5 minus 05:00:00 # undo password-control aging enable undo password-control length enable undo password-control history enable password-control login-attempt 3 exceed lock-time 120 # dhcp relay server-group 1 ip 10.1.141.25 dhcp relay server-group 1 ip 10.1.141.132 dhcp relay server-detect # irf mac-address persistent timer irf auto-update enable undo irf link-delay # domain default enable ENTERPRISE NAME # router id 10.134.182.0 ip ttl-expires enable ip unreachables enable # undo ip http enable # multicast routing-enable # acl number 2000 name rule 0 permit source 192.168.3.253 0 rule 1 permit source 10.1.141.21 0 rule 2 permit source 10.1.141.23 0 rule 3 permit source 10.1.141.196 0 rule 4 permit source 128.1.245.14 0 rule 5 permit source 10.1.42.14 0 rule 6 permit source 10.11.26.120 0 rule 7 permit source 10.11.26.121 0 rule 8 permit source 10.11.26.122 0 rule 9 permit source 10.11.26.123 0 rule 10 permit source 10.11.26.100 0 rule 11 permit source 10.11.26.101 0 # vlan 1 # vlan 2 name # vlan 5 name # vlan 120 name # vlan 700 name # vlan 710 name # vlan 730 name # vlan 740 name # vlan 760 name # vlan 761 name # vlan 762 name # vlan 763 name # vlan 764 name # radius scheme system server-type extended primary authentication 127.0.0.1 1645 primary accounting 127.0.0.1 1646 user-name-format without-domain radius scheme ENTERPRISE NAME server-type extended primary authentication 128.1.5.115 primary accounting 128.1.5.115 key authentication 4uth3nt1c4t10n key accounting 4aac0unt1ng user-name-format without-domain nas-ip 10.134.182.0 # domain ENTERPRISE NAME authentication default radius-scheme ENTERPRISE NAME authentication login radius-scheme ENTERPRISE NAME authorization login radius-scheme ENTERPRISE NAME authentication lan-access radius-scheme ENTERPRISE NAME authorization lan-access radius-scheme ENTERPRISE NAME access-limit disable state active idle-cut disable self-service-url disable domain system access-limit disable state active idle-cut disable self-service-url disable # user-group system # local-user admin password cipher R'A+R<ZO]]Y+L7<J]HEQ:A!! authorization-attribute level 3 service-type ssh telnet terminal service-type ftp # stp bpdu-protection stp pathcost-standard dot1t stp enable stp region-configuration region-name ENTERPRISE NAME revision-level 1 instance 1 vlan 700 to 729 instance 2 vlan 730 to 759 instance 3 vlan 760 instance 4 vlan 761 instance 5 vlan 762 instance 6 vlan 763 instance 7 vlan 764 instance 8 vlan 400 to 499 instance 9 vlan 500 to 599 active region-configuration # interface NULL0 # interface LoopBack0 ip address 10.134.182.0 255.255.255.255 # interface Vlan-interface1 ip address 192.168.77.4 255.255.255.224 # interface GigabitEthernet1/0/1 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/2 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/3 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/4 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/5 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/6 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/7 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/8 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/9 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/10 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/11 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/12 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/13 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/14 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/15 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/16 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/17 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/18 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/19 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/20 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/21 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/22 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/23 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/24 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/25 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/26 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/27 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/28 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/29 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/30 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/31 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/32 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/33 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/34 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/35 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/36 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/37 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/38 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/39 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/40 port link-mode bridge description Access Point port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/41 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/42 port link-mode bridge description Access Point port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/43 port link-mode bridge description Access Point port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/44 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/45 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/46 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/47 port link-mode bridge port link-type hybrid port hybrid vlan 120 tagged port hybrid vlan 1 untagged stp edged-port enable # interface GigabitEthernet1/0/48 port link-mode bridge port link-type trunk port trunk permit vlan all # interface Ten-GigabitEthernet1/0/49 port link-mode bridge # interface Ten-GigabitEthernet1/0/50 port link-mode bridge # interface Ten-GigabitEthernet1/0/51 port link-mode bridge # interface Ten-GigabitEthernet1/0/52 port link-mode bridge port link-type trunk port trunk permit vlan all # ip route-static 0.0.0.0 0.0.0.0 192.168.77.1 # info-center loghost 10.11.26.100 info-center logbuffer size 100 info-center trapbuffer size 100 # snmp-agent snmp-agent local-engineid 800063A2033822D6B383E2 snmp-agent community write igu4n4 acl 2000 snmp-agent community read petrole0 acl 2000 snmp-agent log all snmp-agent sys-info contact Engineer name snmp-agent sys-info location Enterprise name snmp-agent sys-info version v3 snmp-agent group v3 IMC write-view ViewDefault acl 2000 snmp-agent group v3 Magestad read-view Magestad acl 2000 snmp-agent target-host trap address udp-domain 10.1.141.196 params securityname petr0le0 v3 snmp-agent target-host trap address udp-domain 10.1.141.23 params securityname petr0le0 v3 snmp-agent target-host trap address udp-domain 10.11.26.100 params securityname petr0le0 v3 snmp-agent target-host trap address udp-domain 10.11.26.120 params securityname petr0le0 v3 snmp-agent target-host trap address udp-domain 10.11.26.121 params securityname petr0le0 v3 snmp-agent target-host trap address udp-domain 10.11.26.122 params securityname petr0le0 v3 snmp-agent target-host trap address udp-domain 10.11.26.123 params securityname petr0le0 v3 snmp-agent mib-view included Magestad system snmp-agent usm-user v3 IMC IMC authentication-mode md5 #</9$-DS-)LUa$`*7%+1NQ!! privacy-mode 3des #</9$-DS-)LUa$`*7%+1N_J= acl 2000 snmp-agent usm-user v3 Magestad Magestad authentication-mode md5 G$_H33:I-R1HVA-KR-<1C!!! privacy-mode 3des G$_H33:I-R1HVA-KR-<1C&PA acl 2000 snmp-agent trap source LoopBack0 # header shell %************************************ATENTION************************************ * Computer unit supported by I.T.Corporation. * * This is a computer resource for the exclusive use of Enterprise Name. * * If you are not an authorized user to enter this device * * refrain from doing so, as all activities can be monitored * * or recorded. And if evidence of unauthorized access is discovered, * * modifications to the information, attacks against the integrity of the * * Information such as the entity, among others, will be reported to the * * competent authorities. * *********************************************************************************************** # header shell %************************************ATENTION************************************ * Computer unit supported by I.T.Corporation. * * This is a computer resource for the exclusive use of Enterprise Name. * * If you are not an authorized user to enter this device * * refrain from doing so, as all activities can be monitored * * or recorded. And if evidence of unauthorized access is discovered, * * modifications to the information, attacks against the integrity of the * * Information such as the entity, among others, will be reported to the * * competent authorities. * *********************************************************************************************** # % # dhcp enable # ntp-service unicast-server 137.1.2.3 # ssh server enable ssh client source interface LoopBack0 ssh user admin service-type all authentication-type password # arp source-suppression enable gratuitous-arp-sending enable arp anti-attack valid-check enable # load xml-configuration # load tr069-configuration # user-interface aux 0 authentication-mode scheme history-command max-size 256 user-interface vty 0 15 authentication-mode scheme history-command max-size 256 # return