Пример настройки коммутатора D-Link DES-1228ME A2 15 0 B04

create vlan manag tag 2
config vlan vlanid 1 delete 1-28
config vlan manag add tagged 25-28
config ipif System ipaddress 192.168.2.146/24
create iproute default 192.168.2.1 1
config ipif System vlan manag

disable stp 
config stp ports 1-28 state disable

enable loopdetect
config loopdetect recover_timer 60
config loopdetect interval 10
config loopdetect ports 1-24,26-28 state enabled
config loopdetect ports 25 state disabled

enable snmp traps 
enable snmp authenticate traps
config snmp system_name SW_2-146
config snmp system_contact admin@domain.ru
enable rmon

disable asymmetric_vlan
config vlan default advertisement enable
config vlan manag advertisement disable

config ipif System vlan manag ipaddress 192.168.2.146/24 state enable
disable autoconfig

enable web
config command_prompt SW_2-146
config filter dhcp_server ports 1-24 state enable

enable sntp
config time_zone operator + hour 3 min 0
config sntp primary 192.168.2.129 secondary 0.0.0.0 poll-interval 720
config dst disable

create access_profile ip igmp profile_id 1
config access_profile profile_id 1 add access_id 1 ip igmp port 1-28 permit priority 5
create access_profile ip udp src_port 0xFFFF profile_id 2
config access_profile profile_id 2 add access_id 1 ip udp src_port 67 port 25-26 permit
config access_profile profile_id 2 add access_id 2 ip udp src_port 67 port 1-24 deny
create access_profile ip tcp dst_port 0xFFFF profile_id 3
config access_profile profile_id 3 add access_id 1 ip tcp dst_port 42 port 1-24 deny
config access_profile profile_id 3 add access_id 2 ip tcp dst_port 135 port 1-24 deny
config access_profile profile_id 3 add access_id 3 ip tcp dst_port 139 port 1-24 deny
config access_profile profile_id 3 add access_id 4 ip tcp dst_port 445 port 1-24 deny
config access_profile profile_id 3 add access_id 5 ip tcp dst_port 593 port 1-24 deny
config access_profile profile_id 3 add access_id 6 ip tcp dst_port 2869 port 1-24 deny
config access_profile profile_id 3 add access_id 7 ip tcp dst_port 5000 port 1-24 deny
create access_profile ip udp dst_port 0xFFFF profile_id 4
config access_profile profile_id 4 add access_id 1 ip udp dst_port 42 port 1-25 deny
config access_profile profile_id 4 add access_id 2 ip udp dst_port 137 port 1-25 deny
create access_profile ethernet vlan profile_id 5
config access_profile profile_id 5 add access_id 1 ethernet vlan manag port 1-28 permit priority 7

disable cpu_interface_filtering

enable igmp_snooping
enable igmp_snooping multicast_vlan
create igmp_snooping multicast_vlan IPTV 50
config igmp_snooping multicast_vlan IPTV state enable 
config igmp_snooping multicast_vlan IPTV replace_source_ip 10.0.2.146
config igmp_snooping multicast_vlan IPTV remap_priority 6 replace_priority
config igmp_snooping multicast_vlan IPTV add member_port 1-24 
config igmp_snooping multicast_vlan IPTV add source_port 25-28
config igmp_snooping vlan_name IPTV fast_leave enable
config igmp_snooping data_driven_learning vlan_name IPTV aged_out disable 
config igmp_snooping querier vlan_name IPTV query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state enable version 2
config igmp access_authentication ports 1-28 state disable
config cpu_filter l3_control_pkt 1-28 all state disable
config igmp_snooping querier all state disable
enable snmp
create snmp community vismprivate view CommunityView read_write
delete snmp community private

create account admin admin