165 lines
3.5 KiB
Plaintext
Executable File
165 lines
3.5 KiB
Plaintext
Executable File
#
|
|
sysname CORE
|
|
#
|
|
vlan batch 10 20 30 400
|
|
#
|
|
authentication-profile name default_authen_profile
|
|
authentication-profile name dot1x_authen_profile
|
|
authentication-profile name dot1xmac_authen_profile
|
|
authentication-profile name mac_authen_profile
|
|
authentication-profile name multi_authen_profile
|
|
authentication-profile name portal_authen_profile
|
|
#
|
|
diffserv domain default
|
|
#
|
|
radius-server template default
|
|
#
|
|
pki realm default
|
|
certificate-check none
|
|
#
|
|
free-rule-template name default_free_rule
|
|
#
|
|
portal-access-profile name portal_access_profile
|
|
#
|
|
aaa
|
|
authentication-scheme default
|
|
authentication-mode local
|
|
authentication-scheme radius
|
|
authentication-mode radius
|
|
authorization-scheme default
|
|
authorization-mode local
|
|
accounting-scheme default
|
|
accounting-mode none
|
|
local-aaa-user password policy administrator
|
|
password history record number 0
|
|
password expire 0
|
|
domain default
|
|
authentication-scheme radius
|
|
accounting-scheme default
|
|
radius-server default
|
|
domain default_admin
|
|
authentication-scheme default
|
|
accounting-scheme default
|
|
local-user admin password irreversible-cipher $1c$2{cX@;%V5#$`(w_4>*#q1iDviGwC{
|
|
bCxq8cFF@6EC<80+<(peJH$
|
|
local-user admin privilege level 15
|
|
local-user admin service-type terminal http
|
|
#
|
|
interface Vlanif1
|
|
#
|
|
interface Vlanif10
|
|
ip address 192.168.10.254 255.255.255.0
|
|
#
|
|
interface Vlanif20
|
|
ip address 192.168.20.254 255.255.255.0
|
|
#
|
|
interface Vlanif30
|
|
ip address 192.168.30.254 255.255.255.0
|
|
#
|
|
interface Vlanif400
|
|
ip address 10.0.4.2 255.255.255.252
|
|
#
|
|
interface MEth0/0/1
|
|
ip address 192.168.1.253 255.255.255.0
|
|
#
|
|
interface Eth-Trunk1
|
|
port link-type trunk
|
|
port trunk allow-pass vlan 10
|
|
mode lacp
|
|
#
|
|
interface Eth-Trunk2
|
|
port link-type trunk
|
|
port trunk allow-pass vlan 20 30
|
|
mode lacp
|
|
#
|
|
interface GigabitEthernet0/0/1
|
|
eth-trunk 1
|
|
#
|
|
interface GigabitEthernet0/0/2
|
|
eth-trunk 1
|
|
#
|
|
interface GigabitEthernet0/0/3
|
|
eth-trunk 2
|
|
#
|
|
interface GigabitEthernet0/0/4
|
|
eth-trunk 2
|
|
#
|
|
interface GigabitEthernet0/0/5
|
|
port link-type access
|
|
port default vlan 400
|
|
#
|
|
interface GigabitEthernet0/0/6
|
|
#
|
|
interface GigabitEthernet0/0/7
|
|
#
|
|
interface GigabitEthernet0/0/8
|
|
#
|
|
interface GigabitEthernet0/0/9
|
|
#
|
|
interface GigabitEthernet0/0/10
|
|
#
|
|
interface GigabitEthernet0/0/11
|
|
#
|
|
interface GigabitEthernet0/0/12
|
|
#
|
|
interface GigabitEthernet0/0/13
|
|
#
|
|
interface GigabitEthernet0/0/14
|
|
#
|
|
interface GigabitEthernet0/0/15
|
|
#
|
|
interface GigabitEthernet0/0/16
|
|
#
|
|
interface GigabitEthernet0/0/17
|
|
#
|
|
interface GigabitEthernet0/0/18
|
|
#
|
|
interface GigabitEthernet0/0/19
|
|
#
|
|
interface GigabitEthernet0/0/20
|
|
#
|
|
interface GigabitEthernet0/0/21
|
|
#
|
|
interface GigabitEthernet0/0/22
|
|
#
|
|
interface GigabitEthernet0/0/23
|
|
#
|
|
interface GigabitEthernet0/0/24
|
|
#
|
|
interface GigabitEthernet0/0/25
|
|
#
|
|
interface GigabitEthernet0/0/26
|
|
#
|
|
interface GigabitEthernet0/0/27
|
|
#
|
|
interface GigabitEthernet0/0/28
|
|
#
|
|
interface NULL0
|
|
#
|
|
ospf 1 router-id 1.1.1.1
|
|
area 0.0.0.0
|
|
network 10.0.4.0 0.0.0.3
|
|
network 192.168.10.0 0.0.0.255
|
|
network 192.168.20.0 0.0.0.255
|
|
network 192.168.30.0 0.0.0.255
|
|
#
|
|
undo icmp name timestamp-request receive
|
|
#
|
|
ssh server cipher aes256_ctr aes128_ctr
|
|
ssh server hmac sha2_256
|
|
ssh client cipher aes256_ctr aes128_ctr
|
|
ssh client hmac sha2_256
|
|
ssh server dh-exchange min-len 2048
|
|
#
|
|
user-interface con 0
|
|
authentication-mode none
|
|
user-interface vty 0 4
|
|
user-interface vty 16 20
|
|
#
|
|
dot1x-access-profile name dot1x_access_profile
|
|
#
|
|
mac-access-profile name mac_access_profile
|
|
#
|
|
ops
|
|
#
|
|
return |