156 lines
3.3 KiB
Plaintext
Executable File
156 lines
3.3 KiB
Plaintext
Executable File
#
|
|
sysname S4
|
|
#
|
|
vlan batch 20 30
|
|
#
|
|
authentication-profile name default_authen_profile
|
|
authentication-profile name dot1x_authen_profile
|
|
authentication-profile name dot1xmac_authen_profile
|
|
authentication-profile name mac_authen_profile
|
|
authentication-profile name multi_authen_profile
|
|
authentication-profile name portal_authen_profile
|
|
#
|
|
dhcp enable
|
|
#
|
|
dhcp snooping enable
|
|
#
|
|
diffserv domain default
|
|
#
|
|
radius-server template default
|
|
#
|
|
pki realm default
|
|
certificate-check none
|
|
#
|
|
free-rule-template name default_free_rule
|
|
#
|
|
portal-access-profile name portal_access_profile
|
|
#
|
|
vlan 20
|
|
dhcp snooping enable
|
|
vlan 30
|
|
dhcp snooping enable
|
|
#
|
|
aaa
|
|
authentication-scheme default
|
|
authentication-mode local
|
|
authentication-scheme radius
|
|
authentication-mode radius
|
|
authorization-scheme default
|
|
authorization-mode local
|
|
accounting-scheme default
|
|
accounting-mode none
|
|
local-aaa-user password policy administrator
|
|
password history record number 0
|
|
password expire 0
|
|
domain default
|
|
authentication-scheme radius
|
|
accounting-scheme default
|
|
radius-server default
|
|
domain default_admin
|
|
authentication-scheme default
|
|
accounting-scheme default
|
|
local-user admin password irreversible-cipher $1c$!KEu5`>r/U$XH0oSdg%O*K{t>JY0_
|
|
J/I`r9Rf1"aW(ws]4]S^=+$
|
|
local-user admin privilege level 15
|
|
local-user admin service-type terminal http
|
|
#
|
|
interface Vlanif1
|
|
#
|
|
interface MEth0/0/1
|
|
ip address 192.168.1.253 255.255.255.0
|
|
#
|
|
interface Eth-Trunk1
|
|
port link-type trunk
|
|
port trunk allow-pass vlan 20 30
|
|
mode lacp
|
|
#
|
|
interface GigabitEthernet0/0/1
|
|
eth-trunk 1
|
|
#
|
|
interface GigabitEthernet0/0/2
|
|
eth-trunk 1
|
|
#
|
|
interface GigabitEthernet0/0/3
|
|
port link-type access
|
|
port default vlan 20
|
|
stp edged-port enable
|
|
port-security enable
|
|
#
|
|
interface GigabitEthernet0/0/4
|
|
port link-type access
|
|
port default vlan 30
|
|
stp edged-port enable
|
|
port-security enable
|
|
#
|
|
interface GigabitEthernet0/0/5
|
|
#
|
|
interface GigabitEthernet0/0/6
|
|
#
|
|
interface GigabitEthernet0/0/7
|
|
#
|
|
interface GigabitEthernet0/0/8
|
|
#
|
|
interface GigabitEthernet0/0/9
|
|
#
|
|
interface GigabitEthernet0/0/10
|
|
#
|
|
interface GigabitEthernet0/0/11
|
|
#
|
|
interface GigabitEthernet0/0/12
|
|
#
|
|
interface GigabitEthernet0/0/13
|
|
#
|
|
interface GigabitEthernet0/0/14
|
|
#
|
|
interface GigabitEthernet0/0/15
|
|
#
|
|
interface GigabitEthernet0/0/16
|
|
#
|
|
interface GigabitEthernet0/0/17
|
|
#
|
|
interface GigabitEthernet0/0/18
|
|
#
|
|
interface GigabitEthernet0/0/19
|
|
#
|
|
interface GigabitEthernet0/0/20
|
|
#
|
|
interface GigabitEthernet0/0/21
|
|
#
|
|
interface GigabitEthernet0/0/22
|
|
#
|
|
interface GigabitEthernet0/0/23
|
|
#
|
|
interface GigabitEthernet0/0/24
|
|
#
|
|
interface GigabitEthernet0/0/25
|
|
#
|
|
interface GigabitEthernet0/0/26
|
|
#
|
|
interface GigabitEthernet0/0/27
|
|
#
|
|
interface GigabitEthernet0/0/28
|
|
#
|
|
interface NULL0
|
|
#
|
|
undo icmp name timestamp-request receive
|
|
#
|
|
ssh server cipher aes256_ctr aes128_ctr
|
|
ssh server hmac sha2_256
|
|
ssh client cipher aes256_ctr aes128_ctr
|
|
ssh client hmac sha2_256
|
|
ssh server dh-exchange min-len 2048
|
|
#
|
|
user-interface con 0
|
|
authentication-mode password
|
|
set authentication password cipher $1a$SFrKTa%+a4$4L)<7dU}{5G(z2Q*Gy0+_)r!T\az%
|
|
6O:[iC+^701$
|
|
user-interface vty 0 4
|
|
user-interface vty 16 20
|
|
#
|
|
dot1x-access-profile name dot1x_access_profile
|
|
#
|
|
mac-access-profile name mac_access_profile
|
|
#
|
|
ops
|
|
#
|
|
return |