!

Software Version V200R019C00SPC500

#
sysname YN4-A1_1F-OA-JR-01-S5735-L24P4S-B1-15U#
#
info-center loghost 10.173.3.66
#
vlan batch 31 to 32 44 127 to 130 255
#
stp bpdu-protection
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name dot1xmac_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name multi_authen_profile
authentication-profile name portal_authen_profile
#
set save-configuration interval 10080 delay 1
set save-configuration backup-to-server server 10.171.3.69 transport-type tftp
#
telnet server enable
#
clock timezone Thailand add 07:00:00
#
dhcp enable
#
dhcp snooping enable
#
diffserv domain default
#
radius-server template Luxshare_ict
radius-server shared-key cipher %^%#]v-fM/Y="%j$e8=`x%72cT[sHb`WY"9p|4Xk|
_fT%^%#
radius-server authentication 10.171.2.200 1812 weight 80
radius-server authentication 10.171.2.201 1812 weight 80
radius-server accounting 10.171.2.200 1813 weight 80
radius-server accounting 10.171.2.201 1813 weight 80
radius-server retransmit 2
radius-server template default
#
pki realm default
certificate-check none
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
vlan 31
name Guangbo
vlan 32
name xiaofei
vlan 44
name A-Voice
vlan 127
name AP-MGMT
vlan 128
name OA-bangong
vlan 129
name OA-Client-1F
vlan 130
name OA-Client-3F
vlan 255
name OA-SW-MGMT
#
aaa
authentication-scheme default
authentication-mode local
authentication-scheme luxshare_ict_auth
authentication-mode radius local
authentication-scheme radius
authentication-mode radius
authorization-scheme default
authorization-mode local
accounting-scheme default
accounting-mode none
accounting-scheme luxshare_ict_acc
accounting-mode radius
local-aaa-user password policy administrator
password history record number 0
password expire 0
domain default
authentication-scheme radius
accounting-scheme default
radius-server default
domain default_admin
authentication-scheme luxshare_ict_auth
accounting-scheme luxshare_ict_acc
radius-server Luxshare_ict
 local-user admin password irreversible-cipher
$1c$skR&@hL{/T$K{*kSog0z3;Nu*U^g<<),r4z$<+[..<vv&FX(eo>$
local-user admin privilege level 15
local-user admin service-type terminal http
local-user sshadmin password irreversible-cipher
$1c$[9J7=m(t)C$#:KF8A,NW+NAk#Xz7b,<!6!|'>}P~UwTgS7`1f!&$
local-user sshadmin privilege level 3
local-user sshadmin service-type telnet ssh
#
interface Vlanif1
#
interface Vlanif255
description SW-MGMT
ip address 10.173.255.6 255.255.255.128
#
interface MEth0/0/1
shutdown
#
interface MEth0/0/2
#
interface Eth-Trunk24
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 31 to 33 44 127 to 130 255
mode lacp
dhcp snooping trusted
#
interface Eth-Trunk28
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 31 to 32 44 127 to 130 255
stp bpdu-filter enable
mode lacp
dhcp snooping trusted
#
interface GigabitEthernet0/0/1
description Link to - AP
port link-type access
port default vlan 127
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/2
description Link to - AP
port link-type access
port default vlan 127
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/3
description Link to - AP
port link-type access
port default vlan 127
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/4
description Link to - AP
port link-type access
port default vlan 127
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/5
description Link to - AP
port link-type access
port default vlan 127
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/6
description Link to - AP
port link-type access
port default vlan 127
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/7
description Link to - KAOQIN
port link-type access
port default vlan 32
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/8
description Link to - AP
port link-type access
port default vlan 127
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/9
description Link to - AP
port link-type access
port default vlan 127
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/10
description Link to - AP
port link-type access
port default vlan 127
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/11
port link-type access
port default vlan 128
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/12
port link-type access
port default vlan 128
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/13
port link-type access
port default vlan 128
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/14
port link-type access
port default vlan 128
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/15
port link-type access
port default vlan 128
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/16
port link-type access
port default vlan 128
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/17
port link-type access
port default vlan 128
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/18
port link-type access
port default vlan 128
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/19
port link-type access
port default vlan 128
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/20
port link-type access
port default vlan 128
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/21
port link-type access
port default vlan 128
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/22
port link-type access
port default vlan 128
stp loop-protection
stp edged-port enable
#
interface GigabitEthernet0/0/23
eth-trunk 24
#
interface GigabitEthernet0/0/24
eth-trunk 24
#
interface GigabitEthernet0/0/25
#
interface GigabitEthernet0/0/26
#
interface GigabitEthernet0/0/27
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/28
port link-type trunk
port trunk allow-pass vlan 2 to 4094
dhcp snooping trusted
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 10.173.255.1 description Default-Route
#
snmp-agent
snmp-agent local-engineid 800007DB03F4E5F2C204A2
snmp-agent community read cipher %^%#1gM{9/Fe';:[g<L2-
NB2]V<[W0I9*=cugEBX1yZC^\!p7olRV.Q\,h<F#=Q8({WHTX`=`2vB/^H]GtG'%^
%#
snmp-agent sys-info version v2c
undo snmp-agent sys-info version v3
snmp-agent mib-view excluded allextrmon rmon
snmp-agent inform timeout 5
snmp-agent inform resend-times 6
snmp-agent inform pending 7
#
stelnet server enable
ssh user sshadmin
ssh user sshadmin authentication-type password
ssh user sshadmin service-type stelnet
ssh server cipher aes256_ctr aes128_ctr
ssh server hmac sha2_256
ssh client cipher aes256_ctr aes128_ctr
ssh client hmac sha2_256
ssh server dh-exchange min-len 2048
#
user-interface con 0
authentication-mode aaa
user-interface vty 0 4
authentication-mode aaa
user privilege level 3
protocol inbound all
user-interface vty 16 20
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#
ops
#
return