Пример настройки коммутатора D-Link DES-3526 620B21

create vlan vlanid 2
config vlan vlanid 1 delete 1-26
config vlan vlanid 2 add tagged 25-26 name manag
config ipif System ipaddress 192.168.2.150/24
create iproute default 192.168.2.1 1
config ipif System vlan manag
enable password encryption

disable stp 
config stp ports 1-26 state disable

enable loopdetect
config loopdetect recover_timer 60
config loopdetect interval 10
config loopdetect ports 1-24,26 state enabled
config loopdetect ports 25 state disabled

enable snmp traps 
enable snmp authenticate traps
config snmp system_name SW_2-150
config snmp system_contact admin@domain.ru
enable rmon

disable asymmetric_vlan
config vlan default advertisement enable
config vlan manag advertisement disable

config ipif System vlan manag ipaddress 192.168.2.150/24 state enable
disable autoconfig

config command_prompt SW_2-150
enable web
config filter dhcp_server ports 1-24 state enable

enable sntp
config time_zone operator + hour 3 min 0
config sntp primary 192.168.2.129 secondary 0.0.0.0 poll-interval 720
config dst disable

create access_profile ip udp src_port_mask 0xFFFF profile_id 2
config access_profile profile_id 2 add access_id auto_assign ip udp src_port 67 port 25-26 permit
config access_profile profile_id 2 add access_id auto_assign ip udp src_port 67 port 1-24 deny

create access_profile ip tcp dst_port_mask 0xffff profile_id 3
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 42 port 25-26 deny
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 135 port 25-26 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 139 port 25-26 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 445 port 25-26 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 593 port 25-26 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 2869 port 25-26 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port 5000 port 25-26 deny

create access_profile ip udp dst_port_mask 0xffff profile_id 4
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port 42 port 25-26 deny 
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port 137 port 25-26 deny

create access_profile ethernet vlan profile_id 5
config access_profile profile_id 5 add access_id 1 ethernet vlan manag port 1-10 permit priority 7 replace_priority

create snmp community private view CommunityView read_write
delete snmp community public

enable igmp_snooping
create igmp_snooping multicast_vlan IPTV 50
config igmp_snooping multicast_vlan IPTV state enable 
config igmp_snooping multicast_vlan IPTV replace_source_ip 10.0.2.150
config igmp_snooping multicast_vlan IPTV remap_priority 6 replace_priority
config igmp_snooping multicast_vlan IPTV member_port 1-24
config igmp_snooping multicast_vlan IPTV source_port 25-26
config igmp_snooping querier IPTV query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state enable
config igmp access_authentication ports 1-26 state disable
config cpu_filter l3_control_pkt 1-26 all state disable
config igmp_snooping querier all state disable

create account admin admin