sysname tur-asw-02

#
hwtacacs scheme CANTV
primary authentication 10.120.28.4
secondary authentication 10.120.156.4
primary authorization 10.120.28.4
secondary authorization 10.120.156.4
primary accounting 10.120.28.4
secondary accounting 10.120.156.4
local enable
nas-ip 10.121.191.207
key authentication pilsenet
key authorization pilsenet
key accounting pilsenet
timer response-timeout 15
user-name-format without-domain
#
radius scheme system
server-type huawei
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain

domain system
hwtacacs-scheme CANTV
access-limit disable
state active
vlan-assignment-mode integer
idle-cut disable
self-service-url disable
messenger time disable

domain default enable system

#
local-server nas-ip 127.0.0.1 key huawei

local-user admin
password cipher $]M,;1#TH5D2B(]TQ$I]:1!!
service-type ssh telnet level 3
#
info-center source ARP channel 2
info-center source IP channel 2
info-center source SNMP channel 2
info-center loghost 10.119.64.6
info-center loghost 161.196.109.3 facility local4
info-center loghost 161.196.71.41 facility local4
info-center logbuffer channel 2 size 512
#
Specify deadloop monitor
#
temperature-limit 0 10 80
#
undo loopback-detection enable
#
acl number 2010
rule 1 permit source 200.44.46.0 0.0.0.127
 rule 2 permit source 161.196.49.0 0.0.0.127
rule 3 permit source 161.196.42.0 0.0.0.255
rule 4 permit source 172.16.0.0 0.0.255.255
rule 5 permit source 10.119.64.0 0.0.0.15
rule 6 permit source 10.128.2.110 0
rule 7 deny
acl number 2050
rule 1 permit source 161.196.84.0 0.0.0.255
rule 2 permit source 161.196.49.0 0.0.0.255
rule 3 permit source 161.196.42.0 0.0.0.255
rule 4 permit source 10.120.156.0 0.0.0.255
rule 5 permit source 10.125.178.0 0.0.0.255
rule 6 permit source 200.44.46.0 0.0.0.127
rule 10 deny
acl number 2051
rule 1 permit source 10.129.0.0 0.0.0.255
rule 2 permit source 10.128.0.0 0.0.0.255
rule 3 permit source 200.44.32.0 0.0.0.255
rule 4 permit source 200.109.127.0 0.0.0.255
rule 5 deny
acl number 2052
rule 1 permit source 10.119.64.0 0.0.0.15
rule 2 deny
#
acl number 3000 match-order auto
rule 0 permit udp source 10.128.0.50 0 source-port eq ntp destination 10.121.191.207 0
rule 1 permit udp source 10.128.0.61 0 source-port eq ntp destination 10.121.191.207 0
rule 2 permit tcp source 10.128.0.50 0 source-port eq 123 destination 10.121.191.207 0
rule 3 permit tcp source 10.128.0.61 0 source-port eq 123 destination 10.121.191.207 0
rule 4 permit tcp source 10.120.28.4 0 source-port eq tacacs destination 10.121.191.207 0
rule 5 permit tcp source 10.120.156.4 0 source-port eq tacacs destination 10.121.191.207 0
rule 6 permit tcp destination 10.121.191.207 0 destination-port eq 22
rule 7 permit tcp destination 10.121.191.207 0 destination-port range 161 162
rule 8 permit udp destination 10.121.191.207 0 destination-port range snmp snmptrap
rule 9 deny udp destination 10.121.191.207 0
rule 10 deny tcp destination 10.121.191.207 0
rule 11 permit ip
#
vlan 1
#
vlan 5
description VLAN_DCN_GESTION
#
vlan 32
description Vlan_DCN_Gestion_Nueva_ME
#
vlan 50
description Vlan_Servicio_NGN_10.120.97.128
#
vlan 102
description Vlan_ADSL_NA08-330_El_Cambur
#
interface Vlan-interface1
shutdown
ip address dhcp-alloc
#
interface Vlan-interface5
description VLAN_DCN_GESTION
ip address 10.121.191.207 255.255.255.192
#
interface Aux0/0
#
interface Ethernet0/1
stp edged-port enable
description Conexion a Mini UMG tur-dmgw-00 01/FE0
duplex full
speed 100
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 50
#
interface Ethernet0/2
stp edged-port enable
description Conexion a Mini UMG tur-dmgw-00 01/FE1
duplex full
speed 100
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 50
#
interface Ethernet0/3
stp edged-port enable
description Conexion a Mini UMG tur-dmgw-00 03/FE0
duplex full
speed 100
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 50
#
interface Ethernet0/4
stp edged-port enable
description Conexion a Mini tur-dmgw-01 01/FE0
duplex full
speed 100
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 50
#
interface Ethernet0/5
stp edged-port enable
description Conexion a Mini tur-dmgw-01 01/FE1
duplex full
speed 100
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 50
#
interface Ethernet0/6
stp edged-port enable
description Conexion a Mini tur-dmgw-01 03/FE0
duplex full
speed 100
 port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 50
#
interface Ethernet0/7
shutdown
#
interface Ethernet0/8
stp edged-port enable
description Conversor X.25-X.28/IP_TUR-AXE-00,Asigna:22/11/2013
duplex full
speed 100
port access vlan 32
#
interface Ethernet0/9
shutdown
#
interface Ethernet0/10
shutdown
#
interface Ethernet0/11
shutdown
#
interface Ethernet0/12
shutdown
#
interface Ethernet0/13
stp edged-port enable
description Conexion a Mini UMG tur-dmgw-00 01/OMC
duplex full
speed 100
port access vlan 5
#
interface Ethernet0/14
stp edged-port enable
description Conexion a Mini UMG tur-dmgw-01 01/OMC
duplex full
speed 100
port access vlan 5
#
interface Ethernet0/15
shutdown
#
interface Ethernet0/16
shutdown
#
interface Ethernet0/17
shutdown
#
interface Ethernet0/18
shutdown
#
interface Ethernet0/19
shutdown
#
interface Ethernet0/20
 shutdown
#
interface Ethernet0/21
shutdown
#
interface Ethernet0/22
stp disable
description NGN DCN tur-asw-acc-dcn-00 puerto 0/4
duplex full
speed 100
port access vlan 5
#
interface Ethernet0/23
duplex full
speed 100
shutdown
#
interface Ethernet0/24
duplex full
speed 100
shutdown
#
interface GigabitEthernet1/1
description tur-asw-02 ME tur-dsw-00 puerto 2/1/10
duplex full
speed 1000
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 32 50 102
#
interface GigabitEthernet1/2
shutdown
#
interface GigabitEthernet1/3
shutdown
#
interface GigabitEthernet1/4
stp edged-port enable
description Conexion to NA08-330 El Cambur cab-amgw-00 IPMB/00/A/02
duplex full
speed 1000
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 32 50 102
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 10.121.191.193 preference 60
#
snmp-agent
snmp-agent local-engineid 800007DB000FE25561006877
snmp-agent community read abismo acl 2050
snmp-agent community write AswU2Kwr1
snmp-agent community read Switch@5W
snmp-agent sys-info contact Datos Aragua
snmp-agent sys-info location Turmero
 snmp-agent sys-info version all
snmp-agent target-host trap address udp-domain 10.119.64.4 params securityname u2000
snmp-agent target-host trap address udp-domain 10.119.64.8 params securityname u2000
snmp-agent mib-view included iso-view iso
snmp-agent trap enable standard
snmp-agent trap enable configuration
#
ntp-service unicast-server 10.128.0.50 priority
ntp-service unicast-server 10.128.0.61
#
ssh authentication-type default password
ssh user admin authentication-type password
#
header shell %+++++++++++++++++++++++++++++++++++++++++++++++++++++++ Este
sistema es propiedad de CANTV ++ Desconectese si usted no es un usuario autorizado ++++++++
+++++++++++++++++++++++++++++++++++++++++++++++%
header incoming %+++++++++++++++++++++++++++++++++++++++++++++++++++++++ Este
sistema es propiedad de CANTV ++ Desconectese si usted no es un usuario autorizado ++++++++
+++++++++++++++++++++++++++++++++++++++++++++++%
header login %+++++++++++++++++++++++++++++++++++++++++++++++++++++++ Este
sistema es propiedad de CANTV ++ Desconectese si usted no es un usuario autorizado ++++++++
+++++++++++++++++++++++++++++++++++++++++++++++%
#
stp timer max-age 600
stp enable
#
user-interface aux 0
authentication-mode password
set authentication password cipher >!N-F(IZY9[Q=^Q`MAF4<1!!
user-interface vty 0
authentication-mode scheme command-authorization
user privilege level 3
idle-timeout 15 0
screen-length 0
user-interface vty 1 4
authentication-mode scheme command-authorization
user privilege level 3
idle-timeout 15 0
#
return