Заметки Sandbox

reset

create vlan vlanid 2
config vlan vlanid 1 delete 1-26
config vlan vlanid 2 add tagged 25-26 name manag
config ipif System ipaddress 192.168.2.181/24
create iproute default 192.168.2.1 1
config ipif System vlan manag
enable password encryption
create account admin admin

disable stp 
config stp ports 1-26 state disable

enable loopdetect
config loopdetect recover_timer 60
config loopdetect interval 10
config loopdetect ports 1-26 state enabled
config loopdetect ports 25 state disabled

enable snmp traps 
enable snmp authenticate traps 
config snmp system_name SW_2-181
config snmp system_contact admin@domain.ru
enable rmon

disable asymmetric_vlan
config vlan default advertisement enable
config vlan manag advertisement disable

config ipif System vlan manag ipaddress 192.168.2.181/24 state enabled
disable autoconfig

config command_prompt SW_2-181
enable web
config filter dhcp_server ports

enable sntp
config time_zone operator + hour 4 min 0
config sntp primary 192.168.2.129 secondary 0.0.0.0 poll-interval 720
config dst disable

create access_profile ip udp src_port_mask 0xFFFF profile_id 2
config access_profile profile_id 2 add access_id auto_assign ip udp src_port 67 port 25-26 permit
config access_profile profile_id 2 add access_id auto_assign ip udp src_port 67 port 1-24 deny

create access_profile ip tcp dst_port_mask 0xffff profile_id 3
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port          42 port 1-24 deny
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port         135 port 1-24 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port         139 port 1-24 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port         445 port 1-24 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port         593 port 1-24 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port        2869 port 1-24 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port        5000 port 1-24 deny

create access_profile ip udp dst_port_mask 0xffff profile_id 4
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port          42 port 1-25 deny 
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port         137 port 1-25 deny 

create access_profile ethernet vlan profile_id 5
config access_profile profile_id 5 add access_id auto_assign ethernet vlan manag port 1-26 permit priority 7 replace_priority