Заметки Sandbox

reset

create vlan vlanid 2
config vlan vlanid 1 delete 1-50
config vlan vlanid 2 add tagged 49-50 name manag
config ipif System ipaddress 192.168.2.141/24
config ipif System vlan manag
enable password encryption
create account admin admin

enable loopdetect
config loopdetect recover_timer 60
config loopdetect interval 10
config loopdetect ports 1-50 state enabled
config loopdetect ports 49 state disabled

enable snmp traps 
enable snmp authenticate traps 
config snmp system_name SW_2-141
config snmp system_contact admin@domain.ru
enable rmon

disable asymmetric_vlan
config vlan default advertisement enable
config vlan manag advertisement disable

config ipif System vlan manag ipaddress 192.168.2.141/24 state enabled
disable autoconfig

enable web
config command_prompt SW_2-141
config filter dhcp_server ports 1-48

enable sntp
config time_zone operator + hour 4 min 0
config sntp primary 192.168.2.129 secondary 0.0.0.0 poll-interval 720
config dst disable

create access_profile ip udp src_port_mask 0xFFFF profile_id 1
config access_profile profile_id 1 add access_id auto_assign ip udp src_port 67 port 49-50 permit
config access_profile profile_id 1 add access_id auto_assign ip udp src_port 67 port 1-48 deny

create access_profile ip tcp dst_port_mask 0xffff profile_id 2
config access_profile profile_id 2 add access_id auto_assign ip tcp dst_port          42 port 1-48 deny
config access_profile profile_id 2 add access_id auto_assign ip tcp dst_port         135 port 1-48 deny 
config access_profile profile_id 2 add access_id auto_assign ip tcp dst_port         139 port 1-48 deny 
config access_profile profile_id 2 add access_id auto_assign ip tcp dst_port         445 port 1-48 deny 
config access_profile profile_id 2 add access_id auto_assign ip tcp dst_port         593 port 1-48 deny 
config access_profile profile_id 2 add access_id auto_assign ip tcp dst_port        2869 port 1-48 deny 
config access_profile profile_id 2 add access_id auto_assign ip tcp dst_port        5000 port 1-48 deny

create access_profile ip udp dst_port_mask 0xffff profile_id 3 
config access_profile profile_id 3 add access_id auto_assign ip udp dst_port          42 port 1-49 deny 
config access_profile profile_id 3 add access_id auto_assign ip udp dst_port         137 port 1-49 deny