Заметки Sandbox

reset

create vlan vlanid 2
config vlan vlanid 1 delete 2-28
config vlan vlanid 2 add tagged 25-28 name manag
config ipif System ipaddress 192.168.2.181/24

create iproute default 192.168.2.1 1
config ipif System vlan manag
enable password encryption
create account admin admin

disable stp 
config stp ports 1-28 state disable
enable loopdetect
config loopdetect recover_timer 60
config loopdetect interval 10
config loopdetect ports 1-28 state enabled
config loopdetect ports 25 state disabled
enable snmp traps 
enable snmp authenticate traps 
config snmp system_name SW_2-181

config snmp system_contact admin@domain.ru
enable rmon
disable asymmetric_vlan
config vlan default advertisement enable
config vlan manag advertisement disable
config ipif System vlan manag ipaddress 192.168.2.181/24 state enabled

disable autoconfig

enable web
config command_prompt SW_2-181
config filter dhcp_server ports 1-24

enable sntp
config time_zone operator + hour 4 min 0
config sntp primary 192.168.2.129 secondary 0.0.0.0 poll-interval 720
config dst disable

create access_profile ip udp src_port_mask 0xFFFF profile_id 2
config access_profile profile_id 2 add access_id auto_assign ip udp src_port 67 port 25-28 permit
config access_profile profile_id 2 add access_id auto_assign ip udp src_port 67 port 1-24 deny
create access_profile ip tcp dst_port_mask 0xffff profile_id 3
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port          42 port 1-24 deny
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port         135 port 1-24 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port         139 port 1-24 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port         445 port 1-24 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port         593 port 1-24 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port        2869 port 1-24 deny 
config access_profile profile_id 3 add access_id auto_assign ip tcp dst_port        5000 port 1-24 deny
create access_profile ip udp dst_port_mask 0xffff profile_id 4
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port          42 port 1-25 deny 
config access_profile profile_id 4 add access_id auto_assign ip udp dst_port         137 port 1-25 deny 
create access_profile ethernet vlan profile_id 5
config access_profile profile_id 5 add access_id auto_assign ethernet vlan manag port 1-28 permit priority 7 replace_priority