Заметки Sandbox

reset

create vlan vlanid 2
config vlan vlanid 1 delete 1-10
config vlan vlanid 2 add tagged 9-10 name manag
config ipif System ipaddress 192.168.2.100/24
create iproute default 192.168.2.1 1
config ipif System vlan manag
enable password encryption
create account admin admin

disable stp 
config stp ports 1-10 state disable

enable loopdetect
config loopdetect recover_timer 60
config loopdetect interval 10
config loopdetect ports 1-8 state enabled
config loopdetect ports 9,10 state disabled

enable snmp traps 
enable snmp authenticate_traps 
config snmp system_name SW_2-100
config snmp system_contact admin@domain.ru
enable rmon

disable asymmetric_vlan
config vlan default advertisement enable
config vlan manag advertisement disable

config ipif System vlan manag ipaddress 192.168.2.100/24 state enable
disable autoconfig

config command_prompt SW_2-100
enable web
config filter dhcp_server ports 1-8 state enable 

enable sntp
config time_zone operator + hour 4 min 0
config sntp primary 192.168.2.129 secondary 0.0.0.0 poll-interval 720
config dst disable

create access_profile ip udp src_port_mask 0xFFFF profile_id 2
config access_profile profile_id 2 add access_id auto_assign ip udp src_port 67 port 9-10 permit
config access_profile profile_id 2 add access_id auto_assign ip udp src_port 67 port 1-8 deny

create access_profile ip tcp dst_port_mask 0xffff profile_id 3
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port          42 port 1-8 deny
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port         135 port 1-8 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port         139 port 1-8 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port         445 port 1-8 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port         593 port 1-8 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port        2869 port 1-8 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port        5000 port 1-8 deny

create access_profile ip udp dst_port_mask 0xffff profile_id 4
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port          42 port 1-10 deny 
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port         137 port 1-10 deny 

enable igmp_snooping
enable igmp_snooping multicast_vlan
create igmp_snooping multicast_vlan IPTV 50
config igmp_snooping multicast_vlan IPTV state enable 
config igmp_snooping multicast_vlan IPTV replace_source_ip 10.0.2.100
config igmp_snooping multicast_vlan IPTV remap_priority 6 replace_priority
config igmp_snooping multicast_vlan IPTV add member_port 1-8
config igmp_snooping multicast_vlan IPTV add source_port 9-10
config igmp_snooping vlan_name IPTV fast_leave enable
config igmp_snooping data_driven_learning vlan_name IPTV aged_out disable 
config igmp_snooping querier vlan_name IPTV query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state enable version 2
config igmp access_authentication ports 1-10 state disable
config cpu_filter l3_control_pkt 1-10 all state disable
config igmp_snooping querier all state disable