ITC/3AV WIKI

Guide files:
#
 version 7.1.070, Release 3507
#
 sysname HPE
#
 clock timezone gmt-5 add 17:32:00
 clock protocol none 
#
 telnet server enable 
#
 irf mac-address persistent always
 irf auto-update enable
 irf link-delay 300
 irf member 1 priority 32
 irf member 2 priority 1
 irf member 3 priority 1
 irf member 1 description P7Num001
 irf member 2 description P7Num002
 irf member 3 description P7Num003
#
igmp-snooping 
#
 lldp global enable
#
 password-recovery enable  
#
vlan 1
 name Default
 description Default
 igmp-snooping enable
#
vlan 5
 name Datos-trunk
 description Datos-trunk
 igmp-snooping enable 
#
vlan 7
 name SUCURSALES
 description SUCURSALES
 igmp-snooping enable
#
irf-port 1/1
 port group interface Ten-GigabitEthernet1/0/51
#
irf-port 1/2
 port group interface Ten-GigabitEthernet1/0/52
#
irf-port 2/1
 port group interface Ten-GigabitEthernet2/0/51 
#
irf-port 2/2
 port group interface Ten-GigabitEthernet2/0/52
#
irf-port 3/1
 port group interface Ten-GigabitEthernet3/0/27
#
irf-port 3/2
 port group interface Ten-GigabitEthernet3/0/28
#
interface Bridge-Aggregation1
 description CONEXION SWITCH IP: X.X.X.X
 port link-type trunk
 port trunk permit vlan all
 link-aggregation mode dynamic
#
interface NULL0
#
interface Vlan-interface1
 description  5510 IP: 192.168.123.237
 ip address 192.168.123.237 255.255.255.0
#
interface GigabitEthernet1/0/1
 port link-mode bridge
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 150 tagged
 port hybrid vlan 144 untagged
 port hybrid pvid vlan 144
 broadcast-suppression pps 3000
 poe enable
#
interface GigabitEthernet1/0/2
 port link-mode bridge
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 150 tagged
 port hybrid vlan 144 untagged
 port hybrid pvid vlan 144
 broadcast-suppression pps 3000
 poe enable
#
interface GigabitEthernet1/0/3
 port link-mode bridge
 port link-type hybrid
 undo port hybrid vlan 1
 port hybrid vlan 150 tagged
 port hybrid vlan 144 untagged
 port hybrid pvid vlan 144
 broadcast-suppression pps 3000
 poe enable
#
interface Ten-GigabitEthernet1/0/51
#
interface Ten-GigabitEthernet1/0/52
#
interface Ten-GigabitEthernet2/0/51
#
interface Ten-GigabitEthernet2/0/52
#
interface Ten-GigabitEthernet3/0/27
#
interface Ten-GigabitEthernet3/0/28
#
 scheduler logfile size 16
#
line class aux
 authentication-mode scheme
 user-role network-admin
#
line class vty
 user-role network-operator
#
line aux 0 2
 authentication-mode scheme
 user-role network-admin
 set authentication password simple 123456
 idle-timeout 60 0
#
line vty 0 63
 authentication-mode scheme
 user-role network-admin
 user-role network-operator
 set authentication password simple 123456
 protocol inbound ssh
 idle-timeout 60 0 
#
 ip route-static 0.0.0.0 0 192.168.123.243
#
 snmp-agent
 snmp-agent local-engineid 800063A2802C233AC3DAD400000001
 snmp-agent community read fiduread
 snmp-agent community write fiduwrite
 snmp-agent sys-info contact Eng. ABC
 snmp-agent sys-info location Colombia
 snmp-agent sys-info version all 
 snmp-agent group v3 XXXX3group privacy write-view internet
 snmp-agent mib-view included internet internet 
 snmp-agent trap enable stp tc 
#
 ssh server enable
 ssh user admin service-type all authentication-type password
 ssh user manager service-type all authentication-type password
 ssh user monitor service-type all authentication-type password
#
 ntp-service authentication enable
 ntp-service unicast-server 216.239.35.4
#
acl number 2000
 description ACL
 rule 0 permit source 1.0.0.0 0.0.0.255
#
 header login %
************************************ATENCION************************************
Unidad informatica soportada por  I.T.Corporation.
Este es un recursos informatico de uso exclusivo de XXXXXXXXXXX.
Si usted no es un usuario autorizado para ingresar a este dispositivo
abstengase de hacerlo, ya que todas las actividades pueden ser monitoreadas
o grabadas. Y en caso de descubrirse evidencia de accesos no autorizados,
modificaciones a la informacion, atentados contra la integridad de la
informacion como de la entidad , entre otros, seran denunciadas ate  las
autoridades competentes.
********************************************************************************
%
#
 password-control enable 
 undo password-control aging enable 
 undo password-control length enable 
 undo password-control composition enable 
 undo password-control history enable 
 password-control login-attempt 3 exceed unlock 
 password-control update-interval 0           
 password-control login idle-time 0
#
radius scheme system
 user-name-format without-domain
#
domain system
#
 domain default enable system
#
role name level-0
 description Predefined level-0 role
#
role name level-1
 description Predefined level-1 role
#
role name level-2
 description Predefined level-2 role
#
role name level-3
 description Predefined level-3 role
#
role name level-4
 description Predefined level-4 role
#
role name level-5
 description Predefined level-5 role
#
role name level-6
 description Predefined level-6 role 
#
role name level-7
 description Predefined level-7 role
#
role name level-8
 description Predefined level-8 role
#
role name level-9
 description Predefined level-9 role
#
role name level-10
 description Predefined level-10 role
#
role name level-11
 description Predefined level-11 role
#
role name level-12
 description Predefined level-12 role
#
role name level-13
 description Predefined level-13 role
#
role name level-14
 description Predefined level-14 role
#
user-group system
#
local-user admin class manage
 service-type telnet https ssh terminal
 authorization-attribute user-profile admin
 authorization-attribute user-role network-admin
#
local-user manager class manage
 service-type telnet https ssh terminal
 authorization-attribute user-profile admin
 authorization-attribute user-role network-admin
 authorization-attribute user-role network-operator
#
local-user monitor class manage
 service-type telnet https ssh terminal
 authorization-attribute user-profile monitor
 authorization-attribute user-role network-operator
#
 ip https enable
#
return


-------------------------
-Other voice script
-------------------------
telnet server enable
#
voice-vlan mac-address a4b4-3900-0000 mask ffff-ff00-0000 description Cisco3
voice-vlan mac-address cc7f-7500-0000 mask ffff-ff00-0000 description Cisco5
voice-vlan mac-address d4ad-7100-0000 mask ffff-ff00-0000 description Cisco1
voice-vlan mac-address 0029-c200-0000 mask ffff-ff00-0000 description Cisco2
voice-vlan mac-address 002f-5c00-0000 mask ffff-ff00-0000 description Cisco8
voice-vlan mac-address 04b4-3900-0000 mask ffff-ff00-0000 description Cisco7
voice-vlan mac-address 045f-b900-0000 mask ffff-ff00-0000 description Cisco7
voice-vlan mac-address 488b-0a00-0000 mask ffff-ff00-0000 description Cisco9  
#
vlan 144
name VLAN 144
description VLAN 144
igmp-snooping enable  
#
vlan 152
name Voz-152
description Voz-152
igmp-snooping enable
#
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 144 untagged
port hybrid pvid vlan 144
voice-vlan 152 enable
broadcast-suppression pps 3000
poe enable
#
——