====== DLink серии DES-3200-xx а так же ME прошивка в связке с MikBiLL ====== ====== Описание ====== Все указания нужно выполнять, шаг в сторону - работать не будет! Принцип работы весьма прост. По событию на порту свича, коммутатор отсылает запрос у radiusd чтобы узнать что делать с абонентом. Микбил отвечает и указывает величину шейпера, и какой номер влана применить на порту. Вланы можно создать абсолютно разные т е влан для страницы без денег, влан для незарегистрированных абонентов, рабочий влан и т д Т е мы имеем действующий комплекс с таким функционалом: * шейпер на свиче * интерактивный доступ на свиче, меняется влан на порту чтобы проинформировать абонента * логирование в биллинге событий на портах свича. Использовать 1 конфиг на все свичи ( в них будет меняться только IP ) Соответственно можно ОЧЕНЬ сильно снизить нагрузку на NAS или же вовсе от него отказаться. на NAS нет необходимости в шейпере, только NAT( по нужде ), учет трафика и формирование Online( по нужде ) ====== Настройка внутри Свича ====== 1.Для начала укажим параметры Radius сервера: {{ :billing:nas_access_server:3200-mac-auth-radius.jpg?nolink& |}} Думаю нет нужды напоминать что управляющий влан должен приходить на машину с биллингом и быть не 1м и изолированным от абонентов. 2. Настроить VLan Суть настройки очень проста: * отключить 1й vlan * Принять все vlan в tag на портах uplink * на клиентских портах не должно быть ни одного vlan {{ :billing:nas_access_server:3200-vlans.jpg?nolink& |}} 3. Теперь указать "Mac-based Access Control Settings" 3а Включить функцию Указать метод авторизации Radius 3б Выбрать Guest Vlan - в случае отказа сервера. 3в Задать Port Settings - > на всех клиентских портах поставить mode host-based ,Aging time 480,Block time - 300 Ниже картинка с примером {{ :billing:nas_access_server:3200-mac-auth-ports.jpg?nolink& |}} ====== Настройка Сегмента ====== Создадим сегмент {{ :billing:nas_access_server:example_vlan_121.jpg?nolink& |}} Далее создаем все действующие сегменты А так же сегмент для страницы без денег и как минимум для неавторизованых включений {{ :billing:nas_access_server:segmets.jpg?nolink& |}} ====== Настройка Системных опций ====== В системных опцияз задаем какие vlan будут без денег, гостевые и т д. При наведении мышки увидете подсказку {{ :billing:nas_access_server:sys-opts-guest-vlan.jpg?nolink& |}} ====== Настройка Устройства ====== Создаем "Тип устройства" {{ :billing:nas_access_server:dlink-switch-type.jpg?nolink& |}} Создаем свич , задаем ему тип, указываем его IP {{ :billing:nas_access_server:switch-basics-example.jpg?nolink& |}} Указываем в свиче порты uplink Не обязательно привязывать uplink к другому свичу {{ :billing:nas_access_server:switch-uplink-example.jpg?nolink& |}} Указываем рабочий vlan для абонентов в этом свиче. Указать только 1 vlan в котором они будут получать услугу интернет. {{ :billing:nas_access_server:dlink-switch-vlans.jpg?nolink& |}} ====== Настройка шейпера для свича ====== Создадим NAS для данного свича Обязательно указать IP,Secret,Тип NAS,Шейпер {{ :billing:nas_access_server:nas-switch-dlink.jpg?nolink& |}} Если хотите отключить шейпер то просто выберети тип None ====== Настройка Freeradius ====== так же для работы шейперов на свиче необходимо добавить атрибуты в freeradius для этого используем dictionary.dlink файл находится в дистрибутиве микбилл начиная с 2.4.0 путь где находится файл словаря dlink ./DISTR/DHCPD/linux/usr/local/share/freeradius/dictionary.dlink так же не забываем приложить этот файл к словарю т е открываем файл dictionary вашего freeradius и добавляем $INCLUDE dictionary.dlink ====== Пример конфига ====== #------------------------------------------------------------------------------- # DES-3200-28F Fast Ethernet Switch # Configuration # # Firmware: Build 4.03.004 # Copyright(C) 2012 D-Link Corporation. All rights reserved. #------------------------------------------------------------------------------- # DEVICE config temperature threshold high 79 config temperature threshold low 11 config temperature trap state enable config temperature log state enable # BASIC # ACCOUNT LIST # ACCOUNT END # PASSWORD ENCRYPTION disable password encryption config serial_port baud_rate 115200 auto_logout 10_minutes enable web 80 enable clipaging config terminal width 80 disable command logging enable password_recovery # DEBUG debug config state enable debug config error_reboot enable # STORM config traffic control 1 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 2 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 3 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 4 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 5 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 6 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 7 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 8 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 9 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 10 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 11 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 12 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 13 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 14 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 15 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 16 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 17 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 18 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 19 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 20 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 21 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 22 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 23 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 24 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 25 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 26 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 27 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control 28 broadcast disable multicast disable unicast disable action drop threshold 131072 countdown 0 time_interval 5 config traffic control auto_recover_time 0 config traffic trap none config traffic control log state enable # LOOP_DETECT enable loopdetect config loopdetect recover_timer 60 interval 10 mode port-based config loopdetect log state enable config loopdetect ports 1 state enable config loopdetect ports 2 state enable config loopdetect ports 3 state enable config loopdetect ports 4 state enable config loopdetect ports 5 state enable config loopdetect ports 6 state enable config loopdetect ports 7 state enable config loopdetect ports 8 state enable config loopdetect ports 9 state enable config loopdetect ports 10 state enable config loopdetect ports 11 state enable config loopdetect ports 12 state enable config loopdetect ports 13 state enable config loopdetect ports 14 state enable config loopdetect ports 15 state enable config loopdetect ports 16 state enable config loopdetect ports 17 state enable config loopdetect ports 18 state enable config loopdetect ports 19 state enable config loopdetect ports 20 state enable config loopdetect ports 21 state enable config loopdetect ports 22 state enable config loopdetect ports 23 state enable config loopdetect ports 24 state enable config loopdetect ports 25 state disable config loopdetect ports 26 state disable config loopdetect ports 27 state disable config loopdetect ports 28 state disable config loopdetect trap none # GM disable sim config sim candidate config sim dp_interval 30 config sim hold_time 100 # GM_H # MIRROR disable mirror # QOS config 802.1p user_priority 0 2 config 802.1p user_priority 1 0 config 802.1p user_priority 2 1 config 802.1p user_priority 3 3 config 802.1p user_priority 4 4 config 802.1p user_priority 5 5 config 802.1p user_priority 6 6 config 802.1p user_priority 7 7 config 802.1p default_priority 1-28 0 config bandwidth_control 1-28 rx_rate no_limit tx_rate no_limit config per_queue bandwidth_control ports 1-28 0 min_rate no_limit max_rate no_limit config per_queue bandwidth_control ports 1-28 1 min_rate no_limit max_rate no_limit config per_queue bandwidth_control ports 1-28 2 min_rate no_limit max_rate no_limit config per_queue bandwidth_control ports 1-28 3 min_rate no_limit max_rate no_limit config per_queue bandwidth_control ports 1-28 4 min_rate no_limit max_rate no_limit config per_queue bandwidth_control ports 1-28 5 min_rate no_limit max_rate no_limit config per_queue bandwidth_control ports 1-28 6 min_rate no_limit max_rate no_limit config per_queue bandwidth_control ports 1-28 7 min_rate no_limit max_rate no_limit config scheduling_mechanism ports 1-28 strict config scheduling ports 1-28 0 weight 1 config scheduling ports 1-28 1 weight 2 config scheduling ports 1-28 2 weight 3 config scheduling ports 1-28 3 weight 4 config scheduling ports 1-28 4 weight 5 config scheduling ports 1-28 5 weight 6 config scheduling ports 1-28 6 weight 7 config scheduling ports 1-28 7 weight 8 # SYSLOG config log_save_timing on_demand disable syslog config system_severity trap information config system_severity log information # TRAF-SEGMENTATION config traffic_segmentation 1-28 forward_list all # SSL disable ssl enable ssl ciphersuite RSA_with_RC4_128_MD5 enable ssl ciphersuite RSA_with_3DES_EDE_CBC_SHA enable ssl ciphersuite DHE_DSS_with_3DES_EDE_CBC_SHA enable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5 config ssl cachetimeout 600 # PORT enable jumbo_frame config ports 1-24 speed auto flow_control disable learning enable state enable config ports 25-28 medium_type copper speed auto flow_control disable learning enable state enable mdix auto config ports 25,28 medium_type fiber speed 100_full flow_control disable learning enable state enable config ports 26-27 medium_type fiber speed auto flow_control disable learning enable state enable # OAM config ethernet_oam ports 1-28 mode active config ethernet_oam ports 1-28 state disable config duld ports 1-28 state disable config duld ports 1-28 discovery_time 5 config duld ports 1-28 mode normal config ethernet_oam ports 1-28 link_monitor error_symbol threshold 1 window 1000 notify_state enable config ethernet_oam ports 1-28 link_monitor error_frame threshold 1 window 1000 notify_state enable config ethernet_oam ports 1-28 link_monitor error_frame_period threshold 1 window 1488100 notify_state enable config ethernet_oam ports 1-28 link_monitor error_frame_seconds threshold 1 window 60000 notify_state enable config ethernet_oam ports 1-28 critical_link_event dying_gasp notify_state enable config ethernet_oam ports 1-28 critical_link_event critical_event notify_state enable config ethernet_oam ports 1-28 received_remote_loopback ignore # DDM config ddm trap disable config ddm log enable config ddm ports 1-28 state enable shutdown none # MANAGEMENT disable snmp traps disable snmp authenticate_traps disable snmp linkchange_traps enable snmp config snmp linkchange_traps ports 1-28 enable # TRAP config snmp coldstart_traps disable config snmp warmstart_traps disable config rmon trap rising_alarm enable config rmon trap falling_alarm enable # TR # IGMP_MULTICAST_VLAN disable igmp_snooping multicast_vlan config igmp_snooping multicast_vlan forward_unmatched disable # VLAN enable pvid auto_assign config vlan default delete 1-28 config vlan default advertisement disable create vlan 71 tag 71 config vlan 71 add tagged 25 config vlan 71 add untagged 27 advertisement disable create vlan 110 tag 110 config vlan 110 add tagged 25-28 advertisement disable create vlan 111 tag 111 config vlan 111 add tagged 25-28 advertisement disable create vlan 118 tag 118 config vlan 118 add tagged 25-27 config vlan 118 add untagged 28 advertisement disable create vlan 120 tag 120 config vlan 120 add tagged 25-28 advertisement disable create vlan 121 tag 121 config vlan 121 add tagged 25-28 advertisement disable create vlan 122 tag 122 config vlan 122 add tagged 25-28 advertisement disable create vlan 123 tag 123 config vlan 123 add tagged 25-28 advertisement disable create vlan 124 tag 124 config vlan 124 add tagged 25-28 advertisement disable create vlan 125 tag 125 config vlan 125 add tagged 25-28 advertisement disable create vlan 126 tag 126 config vlan 126 add tagged 25-28 advertisement disable create vlan 127 tag 127 config vlan 127 add tagged 25-28 advertisement disable create vlan 128 tag 128 config vlan 128 add tagged 25-28 advertisement disable create vlan 129 tag 129 config vlan 129 add tagged 25-28 advertisement disable create vlan 130 tag 130 config vlan 130 add tagged 25-28 advertisement disable create vlan 131 tag 131 config vlan 131 add tagged 25-28 advertisement disable create vlan 132 tag 132 config vlan 132 add tagged 25-28 advertisement disable create vlan 133 tag 133 config vlan 133 add tagged 25-28 advertisement disable create vlan 134 tag 134 config vlan 134 add tagged 25-28 advertisement disable create vlan 135 tag 135 config vlan 135 add tagged 25-28 advertisement disable create vlan 136 tag 136 config vlan 136 add tagged 25-28 advertisement disable create vlan 137 tag 137 config vlan 137 add tagged 25-28 advertisement disable create vlan 138 tag 138 config vlan 138 add tagged 25-28 advertisement disable create vlan 139 tag 139 config vlan 139 add tagged 25-28 advertisement disable create vlan 140 tag 140 config vlan 140 add tagged 25-28 advertisement disable disable qinq disable gvrp config gvrp nni_bpdu_addr dot1d disable vlan_trunk config port_vlan 1-2,4-26 gvrp_state disable ingress_checking enable acceptable_frame admit_all pvid 1 config port_vlan 3 gvrp_state disable ingress_checking enable acceptable_frame admit_all pvid 120 config port_vlan 27 gvrp_state disable ingress_checking enable acceptable_frame admit_all pvid 71 config port_vlan 28 gvrp_state disable ingress_checking enable acceptable_frame admit_all pvid 118 # PORT_SECURITY config port_security system max_learning_addr no_limit disable port_security trap_log config port_security ports 1-28 admin_state disable max_learning_addr 32 lock_address_mode deleteonreset # ACL #CPU Interface Filter disable cpu_interface_filtering # PROTOCOL_VLAN # QINQ config qinq inner_tpid 0x8100 config qinq ports 1-28 missdrop disable outer_tpid 0x8100 config qinq ports 1-28 add_inner_tag disable # 8021X disable 802.1x config 802.1x auth_mode mac_based config 802.1x auth_protocol radius_eap config 802.1x fwd_pdu system disable config 802.1x max_users no_limit config 802.1x authorization attributes radius enable config 802.1x capability ports 1-28 none config 802.1x auth_parameter ports 1-28 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable config 802.1x auth_parameter ports 1-28 max_users 16 # GUEST_VLAN # NLB # FDB config fdb aging_time 300 # ADDRBIND config address_binding dhcp_snoop max_entry ports 1 limit no_limit config address_binding dhcp_snoop max_entry ports 2 limit no_limit config address_binding dhcp_snoop max_entry ports 3 limit no_limit config address_binding dhcp_snoop max_entry ports 4 limit no_limit config address_binding dhcp_snoop max_entry ports 5 limit no_limit config address_binding dhcp_snoop max_entry ports 6 limit no_limit config address_binding dhcp_snoop max_entry ports 7 limit no_limit config address_binding dhcp_snoop max_entry ports 8 limit no_limit config address_binding dhcp_snoop max_entry ports 9 limit no_limit config address_binding dhcp_snoop max_entry ports 10 limit no_limit config address_binding dhcp_snoop max_entry ports 11 limit no_limit config address_binding dhcp_snoop max_entry ports 12 limit no_limit config address_binding dhcp_snoop max_entry ports 13 limit no_limit config address_binding dhcp_snoop max_entry ports 14 limit no_limit config address_binding dhcp_snoop max_entry ports 15 limit no_limit config address_binding dhcp_snoop max_entry ports 16 limit no_limit config address_binding dhcp_snoop max_entry ports 17 limit no_limit config address_binding dhcp_snoop max_entry ports 18 limit no_limit config address_binding dhcp_snoop max_entry ports 19 limit no_limit config address_binding dhcp_snoop max_entry ports 20 limit no_limit config address_binding dhcp_snoop max_entry ports 21 limit no_limit config address_binding dhcp_snoop max_entry ports 22 limit no_limit config address_binding dhcp_snoop max_entry ports 23 limit no_limit config address_binding dhcp_snoop max_entry ports 24 limit no_limit config address_binding dhcp_snoop max_entry ports 25 limit no_limit config address_binding dhcp_snoop max_entry ports 26 limit no_limit config address_binding dhcp_snoop max_entry ports 27 limit no_limit config address_binding dhcp_snoop max_entry ports 28 limit no_limit disable address_binding dhcp_snoop disable address_binding trap_log # NetBiosFilter config filter netbios all state disable config filter extensive_netbios all state disable # DoS config dos_prevention dos_type land_attack action drop state disable config dos_prevention dos_type blat_attack action drop state disable config dos_prevention dos_type tcp_null_scan action drop state disable config dos_prevention dos_type tcp_xmasscan action drop state disable config dos_prevention dos_type tcp_synfin action drop state disable config dos_prevention dos_type tcp_syn_srcport_less_1024 action drop state disable config dos_prevention dos_type ping_death_attack action drop state disable config dos_prevention dos_type tcp_tiny_frag_attack action drop state disable config dos_prevention trap disable config dos_prevention log disable # RADIUS config radius add 1 192.168.0.1 key password auth_port 1812 acct_port 1813 timeout 9 retransmit 5 # DhcpServerScreening config filter dhcp_server ports all state disable config filter dhcp_server illegal_server_log_suppress_duration 5min config filter dhcp_server trap_log disable # PPPoE config pppoe circuit_id_insertion state disable config pppoe circuit_id_insertion ports 1-28 state enable circuit_id ip # sRED config dscp trust all state disable config 802.1p map all 1p_color 0-7 to green config dscp map all dscp_color 0-63 to green config dscp map all dscp_dscp 0 to 0 config dscp map all dscp_dscp 1 to 1 config dscp map all dscp_dscp 2 to 2 config dscp map all dscp_dscp 3 to 3 config dscp map all dscp_dscp 4 to 4 config dscp map all dscp_dscp 5 to 5 config dscp map all dscp_dscp 6 to 6 config dscp map all dscp_dscp 7 to 7 config dscp map all dscp_dscp 8 to 8 config dscp map all dscp_dscp 9 to 9 config dscp map all dscp_dscp 10 to 10 config dscp map all dscp_dscp 11 to 11 config dscp map all dscp_dscp 12 to 12 config dscp map all dscp_dscp 13 to 13 config dscp map all dscp_dscp 14 to 14 config dscp map all dscp_dscp 15 to 15 config dscp map all dscp_dscp 16 to 16 config dscp map all dscp_dscp 17 to 17 config dscp map all dscp_dscp 18 to 18 config dscp map all dscp_dscp 19 to 19 config dscp map all dscp_dscp 20 to 20 config dscp map all dscp_dscp 21 to 21 config dscp map all dscp_dscp 22 to 22 config dscp map all dscp_dscp 23 to 23 config dscp map all dscp_dscp 24 to 24 config dscp map all dscp_dscp 25 to 25 config dscp map all dscp_dscp 26 to 26 config dscp map all dscp_dscp 27 to 27 config dscp map all dscp_dscp 28 to 28 config dscp map all dscp_dscp 29 to 29 config dscp map all dscp_dscp 30 to 30 config dscp map all dscp_dscp 31 to 31 config dscp map all dscp_dscp 32 to 32 config dscp map all dscp_dscp 33 to 33 config dscp map all dscp_dscp 34 to 34 config dscp map all dscp_dscp 35 to 35 config dscp map all dscp_dscp 36 to 36 config dscp map all dscp_dscp 37 to 37 config dscp map all dscp_dscp 38 to 38 config dscp map all dscp_dscp 39 to 39 config dscp map all dscp_dscp 40 to 40 config dscp map all dscp_dscp 41 to 41 config dscp map all dscp_dscp 42 to 42 config dscp map all dscp_dscp 43 to 43 config dscp map all dscp_dscp 44 to 44 config dscp map all dscp_dscp 45 to 45 config dscp map all dscp_dscp 46 to 46 config dscp map all dscp_dscp 47 to 47 config dscp map all dscp_dscp 48 to 48 config dscp map all dscp_dscp 49 to 49 config dscp map all dscp_dscp 50 to 50 config dscp map all dscp_dscp 51 to 51 config dscp map all dscp_dscp 52 to 52 config dscp map all dscp_dscp 53 to 53 config dscp map all dscp_dscp 54 to 54 config dscp map all dscp_dscp 55 to 55 config dscp map all dscp_dscp 56 to 56 config dscp map all dscp_dscp 57 to 57 config dscp map all dscp_dscp 58 to 58 config dscp map all dscp_dscp 59 to 59 config dscp map all dscp_dscp 60 to 60 config dscp map all dscp_dscp 61 to 61 config dscp map all dscp_dscp 62 to 62 config dscp map all dscp_dscp 63 to 63 config dscp map all dscp_priority 0-7 to 0 config dscp map all dscp_priority 8-15 to 1 config dscp map all dscp_priority 16-23 to 2 config dscp map all dscp_priority 24-31 to 3 config dscp map all dscp_priority 32-39 to 4 config dscp map all dscp_priority 40-47 to 5 config dscp map all dscp_priority 48-55 to 6 config dscp map all dscp_priority 56-63 to 7 # ARPSpoofingPrevention # MAC_ADDRESS_TABLE_NOTIFICATION disable mac_notification config mac_notification interval 1 historysize 1 config mac_notification ports 1-28 disable # STP config stp version rstp config stp maxage 20 maxhops 20 forwarddelay 15 txholdcount 6 fbpdu disable hellotime 2 nni_bpdu_addr dot1d config stp priority 32768 instance_id 0 config stp ports 1-28 externalCost auto edge auto p2p auto state enable restricted_role false restricted_tcn false config stp mst_ports 1-28 instance_id 0 internalCost auto priority 128 config stp ports 1-28 fbpdu disable config stp mst_config_id name AC:F1:DF:A8:C1:80 revision_level 0 disable stp # L2PT disable l2protocol_tunnel config l2protocol_tunnel ports all type none # BPDU_PROTECTION disable bpdu_protection config bpdu_protection recovery_timer 60 config bpdu_protection trap none config bpdu_protection log both config bpdu_protection ports 1-28 mode shutdown # SAFEGUARD_ENGINE config safeguard_engine state enable utilization rising 95 falling 70 trap_log disable mode fuzzy # BANNER_PROMP config command_prompt default config greeting_message default # SSH config ssh algorithm 3DES enable config ssh algorithm AES128 enable config ssh algorithm AES192 enable config ssh algorithm AES256 enable config ssh algorithm arcfour enable config ssh algorithm blowfish enable config ssh algorithm cast128 enable config ssh algorithm twofish128 enable config ssh algorithm twofish192 enable config ssh algorithm twofish256 enable config ssh algorithm MD5 enable config ssh algorithm SHA1 enable config ssh algorithm RSA enable config ssh algorithm DSA enable config ssh authmode password enable config ssh authmode publickey enable config ssh authmode hostbased enable config ssh server maxsession 8 config ssh server contimeout 120 config ssh server authfail 2 config ssh server rekey never config ssh server port 22 disable ssh # TELNETS enable telnet 23 # BCPING # SMTP disable smtp # SNTP enable sntp config time_zone operator + hour 0 min 0 config sntp primary 91.236.251.5 secondary 0.0.0.0 poll-interval 720 config dst disable # MULTICAST_FILTER # LACP config link_aggregation algorithm mac_source config lacp_port 1-28 mode passive # IP config ipif System ipaddress 192.168.0.2/16 config ipif System vlan 118 config ipif System dhcp_option12 state disable disable autoconfig config autoconfig timeout 50 # SNMPv3 delete snmp community public delete snmp community private delete snmp user initial delete snmp group initial delete snmp view restricted all delete snmp view CommunityView all config snmp engineID 800000ab03acf1dfa8c180 create snmp view restricted 1.3.6.1.2.1.1 view_type included create snmp view restricted 1.3.6.1.2.1.11 view_type included create snmp view restricted 1.3.6.1.6.3.10.2.1 view_type included create snmp view restricted 1.3.6.1.6.3.11.2.1 view_type included create snmp view restricted 1.3.6.1.6.3.15.1.1 view_type included create snmp view CommunityView 1 view_type included create snmp view CommunityView 1.3.6.1.6.3 view_type excluded create snmp view CommunityView 1.3.6.1.6.3.1 view_type included create snmp group public v1 read_view CommunityView notify_view CommunityView create snmp group public v2c read_view CommunityView notify_view CommunityView create snmp group initial v3 noauth_nopriv read_view restricted notify_view restricted create snmp group private v1 read_view CommunityView write_view CommunityView notify_view CommunityView create snmp group private v2c read_view CommunityView write_view CommunityView notify_view CommunityView create snmp community private view CommunityView read_write create snmp community public view CommunityView read_only create snmp user initial initial # ERPS disable erps config erps log disable config erps trap disable # CFM disable cfm # LLDP enable lldp config lldp message_tx_interval 30 config lldp tx_delay 2 config lldp message_tx_hold_multiplier 4 config lldp reinit_delay 2 config lldp notification_interval 5 config lldp forward_message enable config lldp ports 1-28 notification enable config lldp ports 1-28 admin_status tx_and_rx # MAC-based_Access_Control enable mac_based_access_control config mac_based_access_control authorization attributes radius enable local disable create mac_based_access_control guest_vlanid 111 config mac_based_access_control ports 1-24 state enable config mac_based_access_control ports 25-28 state disable config mac_based_access_control ports 1 max_users 128 config mac_based_access_control ports 1 aging_time 480 config mac_based_access_control ports 1 block_time 300 config mac_based_access_control ports 2 max_users 128 config mac_based_access_control ports 2 aging_time 480 config mac_based_access_control ports 2 block_time 300 config mac_based_access_control ports 3 max_users 128 config mac_based_access_control ports 3 aging_time 480 config mac_based_access_control ports 3 block_time 300 config mac_based_access_control ports 4 max_users 128 config mac_based_access_control ports 4 aging_time 480 config mac_based_access_control ports 4 block_time 300 config mac_based_access_control ports 5 max_users 128 config mac_based_access_control ports 5 aging_time 480 config mac_based_access_control ports 5 block_time 300 config mac_based_access_control ports 6 max_users 128 config mac_based_access_control ports 6 aging_time 480 config mac_based_access_control ports 6 block_time 300 config mac_based_access_control ports 7 max_users 128 config mac_based_access_control ports 7 aging_time 480 config mac_based_access_control ports 7 block_time 300 config mac_based_access_control ports 8 max_users 128 config mac_based_access_control ports 8 aging_time 480 config mac_based_access_control ports 8 block_time 300 config mac_based_access_control ports 9 max_users 128 config mac_based_access_control ports 9 aging_time 480 config mac_based_access_control ports 9 block_time 300 config mac_based_access_control ports 10 max_users 128 config mac_based_access_control ports 10 aging_time 480 config mac_based_access_control ports 10 block_time 300 config mac_based_access_control ports 11 max_users 128 config mac_based_access_control ports 11 aging_time 480 config mac_based_access_control ports 11 block_time 300 config mac_based_access_control ports 12 max_users 128 config mac_based_access_control ports 12 aging_time 480 config mac_based_access_control ports 12 block_time 300 config mac_based_access_control ports 13 max_users 128 config mac_based_access_control ports 13 aging_time 480 config mac_based_access_control ports 13 block_time 300 config mac_based_access_control ports 14 max_users 128 config mac_based_access_control ports 14 aging_time 480 config mac_based_access_control ports 14 block_time 300 config mac_based_access_control ports 15 max_users 128 config mac_based_access_control ports 15 aging_time 480 config mac_based_access_control ports 15 block_time 300 config mac_based_access_control ports 16 max_users 128 config mac_based_access_control ports 16 aging_time 480 config mac_based_access_control ports 16 block_time 300 config mac_based_access_control ports 17 max_users 128 config mac_based_access_control ports 17 aging_time 480 config mac_based_access_control ports 17 block_time 300 config mac_based_access_control ports 18 max_users 128 config mac_based_access_control ports 18 aging_time 480 config mac_based_access_control ports 18 block_time 300 config mac_based_access_control ports 19 max_users 128 config mac_based_access_control ports 19 aging_time 480 config mac_based_access_control ports 19 block_time 300 config mac_based_access_control ports 20 max_users 128 config mac_based_access_control ports 20 aging_time 480 config mac_based_access_control ports 20 block_time 300 config mac_based_access_control ports 21 max_users 128 config mac_based_access_control ports 21 aging_time 480 config mac_based_access_control ports 21 block_time 300 config mac_based_access_control ports 22 max_users 128 config mac_based_access_control ports 22 aging_time 480 config mac_based_access_control ports 22 block_time 300 config mac_based_access_control ports 23 max_users 128 config mac_based_access_control ports 23 aging_time 480 config mac_based_access_control ports 23 block_time 300 config mac_based_access_control ports 24 max_users 128 config mac_based_access_control ports 24 aging_time 480 config mac_based_access_control ports 24 block_time 300 config mac_based_access_control ports 25 max_users 128 config mac_based_access_control ports 25 aging_time 1440 config mac_based_access_control ports 25 block_time 300 config mac_based_access_control ports 26 max_users 128 config mac_based_access_control ports 26 aging_time 1440 config mac_based_access_control ports 26 block_time 300 config mac_based_access_control ports 27 max_users 128 config mac_based_access_control ports 27 aging_time 1440 config mac_based_access_control ports 27 block_time 300 config mac_based_access_control ports 28 max_users 128 config mac_based_access_control ports 28 aging_time 1440 config mac_based_access_control ports 28 block_time 300 config mac_based_access_control ports 1-28 mode host_based config mac_based_access_control method radius config mac_based_access_control password password config mac_based_access_control max_users no_limit config mac_based_access_control trap state disable config mac_based_access_control log state disable # MCFILTER # COMPOUND_AUTHENTICATION enable authorization attributes config authentication server failover block # IGMP_SNOOPING disable igmp_snooping config igmp_snooping data_driven_learning max_learned_entry 128 config igmp_snooping vlan_name default fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name default query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name default expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 71 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 71 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 71 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 110 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 110 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 110 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 111 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 111 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 111 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 118 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 118 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 118 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 120 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 120 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 120 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 121 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 121 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 121 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 122 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 122 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 122 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 123 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 123 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 123 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 124 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 124 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 124 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 125 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 125 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 125 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 126 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 126 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 126 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 127 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 127 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 127 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 128 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 128 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 128 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 129 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 129 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 129 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 130 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 130 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 130 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 131 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 131 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 131 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 132 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 132 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 132 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 133 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 133 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 133 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 134 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 134 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 134 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 135 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 135 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 135 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 136 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 136 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 136 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 137 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 137 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 137 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 138 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 138 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 138 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 139 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 139 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 139 expiry_time 260 state enable aged_out disable config igmp_snooping vlan_name 140 fast_leave disable report_suppression enable state disable config igmp_snooping querier vlan_name 140 query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state disable version 3 config igmp_snooping data_driven_learning vlan_name 140 expiry_time 260 state enable aged_out disable config cpu_filter l3_control_pkt 1-28 all state disable # MLDSNP disable mld_snooping config mld_snooping data_driven_learning max_learned_entry 128 config mld_snooping vlan_name default fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name default query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name default expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 71 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 71 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 71 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 110 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 110 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 110 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 111 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 111 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 111 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 118 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 118 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 118 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 120 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 120 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 120 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 121 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 121 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 121 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 122 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 122 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 122 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 123 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 123 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 123 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 124 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 124 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 124 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 125 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 125 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 125 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 126 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 126 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 126 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 127 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 127 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 127 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 128 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 128 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 128 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 129 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 129 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 129 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 130 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 130 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 130 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 131 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 131 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 131 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 132 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 132 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 132 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 133 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 133 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 133 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 134 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 134 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 134 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 135 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 135 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 135 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 136 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 136 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 136 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 137 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 137 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 137 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 138 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 138 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 138 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 139 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 139 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 139 expiry_time 260 state enable aged_out disable config mld_snooping vlan_name 140 fast_done disable report_suppression enable state disable config mld_snooping querier vlan_name 140 query_interval 125 max_response_time 10 robustness_variable 2 last_listener_query_interval 1 state disable version 2 config mld_snooping data_driven_learning vlan_name 140 expiry_time 260 state enable aged_out disable # ACCESS_AUTHENTICATION_CONTROL config authen_login default method local config authen_enable default method local_enable config authen application console login default config authen application console enable default config authen application telnet login default config authen application telnet enable default config authen application ssh login default config authen application ssh enable default config authen application http login default config authen application http enable default config authen parameter response_timeout 30 config authen parameter attempt 3 disable authen_policy config accounting service network state disable config accounting service shell state disable config accounting service system state disable # DHCP_LOCAL_RELAY disable dhcp_local_relay config dhcp_local_relay option_82 remote_id default config dhcp_local_relay option_82 circuit_id default config dhcp_local_relay option_82 ports 1-28 policy keep # AAA_LOCAL_ENABLE_PASSWORD config admin local_enable # DHCP_RELAY disable dhcp_relay config dhcp_relay hops 4 time 0 config dhcp_relay option_82 state disable config dhcp_relay option_82 check disable config dhcp_relay option_82 policy replace config dhcp_relay option_82 remote_id default config dhcp_relay option_82 circuit_id default config dhcp_relay option_60 state disable config dhcp_relay option_61 state disable config dhcp_relay option_60 default mode drop config dhcp_relay option_61 default drop # Firm # NDP config ipv6 nd ns ipif System retrans_time 0 # ARP config arp_aging time 20 config gratuitous_arp send ipif_status_up enable config gratuitous_arp send dup_ip_detected enable config gratuitous_arp learning enable # SNP_AUTH config igmp access_authentication ports 1-28 state disable # ROUTE create iproute default 192.168.0.1 1 #------------------------------------------------------------------- # End of configuration file for DES-3200-28F #-------------------------------------------------------------------