<3_chang_core>dis cu # version 5.20, Release 2221P27 # sysname 3_chang_core # clock timezone UTC add 08:00:00 # super password level 3 cipher $c$3$NAp4qfaT410bIR68NbYHbPeO5bT6WBAztg== # domain default enable system # ipv6 # telnet server enable # password-recovery enable # igmp-snooping # vlan 1 # vlan 60 # vlan 65 # vlan 70 # vlan 72 to 74 # vlan 100 # vlan 120 # vlan 198 # vlan 501 # vlan 600 # vlan 617 to 619 # domain system access-limit disable state active idle-cut disable self-service-url disable # dhcp server ip-pool 172.18.7.13 static-bind ip-address 172.18.7.13 mask 255.255.255.0 static-bind mac-address 5cc9-995b-8d8a gateway-list 172.18.7.1 dns-list 192.168.0.101 114.114.114.114 expired day 5 # dhcp server ip-pool 172.18.7.4 static-bind ip-address 172.18.7.4 mask 255.255.255.0 static-bind mac-address 5098-b887-5023 gateway-list 172.18.7.1 dns-list 192.168.0.101 114.114.114.114 expired day 5 # dhcp server ip-pool 172.18.7.9 static-bind ip-address 172.18.7.9 mask 255.255.255.0 static-bind mac-address 408d-5c9e-2c3c gateway-list 172.18.7.1 dns-list 192.168.0.101 114.114.114.114 expired day 5 # dhcp server ip-pool 172.18.9.5 static-bind ip-address 172.18.9.5 mask 255.255.255.0 static-bind mac-address e0d5-5e5f-035c gateway-list 172.18.9.1 dns-list 192.168.0.101 114.114.114.114 expired day 5 # dhcp server ip-pool vlan617 network 172.18.7.0 mask 255.255.255.0 gateway-list 172.18.7.1 dns-list 192.168.0.101 114.114.114.114 expired day 5 # dhcp server ip-pool vlan618 network 172.18.8.0 mask 255.255.255.0 gateway-list 172.18.8.1 dns-list 192.168.0.101 114.114.114.114 expired day 5 # dhcp server ip-pool vlan619 network 172.18.9.0 mask 255.255.255.0 gateway-list 172.18.9.1 dns-list 192.168.0.101 114.114.114.114 expired day 5 # dhcp server ip-pool vlan70 network 192.168.70.0 mask 255.255.254.0 gateway-list 192.168.70.254 dns-list 202.96.134.133 192.168.0.101 expired day 7 # user-group system group-attribute allow-guest # local-user admin password cipher $c$3$HO1IfZi+fSX2qnUw2w78msXPuX/NoO8Mw398bFMb authorization-attribute level 3 service-type ssh telnet terminal service-type ftp service-type web local-user dzadmin password cipher $c$3$MjJxAIP3p5u77HHD+dkct05IvqOFgjn/bHom0Q== authorization-attribute level 3 service-type telnet service-type ftp service-type web # stp region-configuration region-name 3 revision-level 1 active region-configuration # stp mode stp stp instance 0 priority 0 stp bpdu-protection stp enable # interface Bridge-Aggregation1 port link-type trunk port trunk permit vlan all link-aggregation mode dynamic # interface Bridge-Aggregation2 port link-type trunk port trunk permit vlan all link-aggregation mode dynamic # interface NULL0 # interface Vlan-interface60 ip address 192.168.60.3 255.255.255.0 undo dhcp select server global-pool # interface Vlan-interface70 ip address 192.168.70.254 255.255.254.0 # interface Vlan-interface100 ip address 192.168.100.253 255.255.255.0 # interface Vlan-interface120 description hulian_1_chang_5720_172.18.120.1 ip address 172.18.120.2 255.255.255.0 # interface Vlan-interface198 ip address 192.168.198.254 255.255.255.0 # interface Vlan-interface600 ip address 172.18.60.3 255.255.255.0 # interface Vlan-interface617 description 3_chang_1F ip address 172.18.7.1 255.255.255.0 # interface Vlan-interface618 description 3_chang_2F ip address 172.18.8.1 255.255.255.0 # interface Vlan-interface619 description 3_chang_3F ip address 172.18.9.1 255.255.255.0 # interface GigabitEthernet1/0/1 port link-type trunk port trunk permit vlan all stp edged-port enable port link-aggregation group 1 # interface GigabitEthernet1/0/2 port link-type trunk port trunk permit vlan all stp edged-port enable port link-aggregation group 1 # interface GigabitEthernet1/0/3 port link-type trunk port trunk permit vlan all port link-aggregation group 2 # interface GigabitEthernet1/0/4 port link-type trunk port trunk permit vlan all port link-aggregation group 2 # interface GigabitEthernet1/0/5 port access vlan 70 stp edged-port enable # interface GigabitEthernet1/0/6 port access vlan 70 stp edged-port enable # interface GigabitEthernet1/0/7 port access vlan 70 stp edged-port enable # interface GigabitEthernet1/0/8 port access vlan 70 stp edged-port enable # interface GigabitEthernet1/0/9 port access vlan 70 stp edged-port enable # interface GigabitEthernet1/0/10 port access vlan 100 # interface GigabitEthernet1/0/11 port access vlan 70 stp edged-port enable # interface GigabitEthernet1/0/12 port link-type trunk port trunk permit vlan all port trunk pvid vlan 619 stp edged-port enable # interface GigabitEthernet1/0/13 port access vlan 70 stp edged-port enable # interface GigabitEthernet1/0/14 port link-type trunk port trunk permit vlan all port trunk pvid vlan 619 stp edged-port enable # interface GigabitEthernet1/0/15 port access vlan 70 stp edged-port enable # interface GigabitEthernet1/0/16 port access vlan 65 stp edged-port enable # interface GigabitEthernet1/0/17 port access vlan 100 stp edged-port enable # interface GigabitEthernet1/0/18 port access vlan 70 stp edged-port enable # interface GigabitEthernet1/0/19 port access vlan 70 stp edged-port enable # interface GigabitEthernet1/0/20 port access vlan 70 stp edged-port enable # interface GigabitEthernet1/0/21 port access vlan 619 stp edged-port enable # interface GigabitEthernet1/0/22 port link-type trunk port trunk permit vlan all port link-aggregation group 1 # interface GigabitEthernet1/0/23 port link-type trunk port trunk permit vlan all shutdown port link-aggregation group 1 # interface GigabitEthernet1/0/24 port access vlan 60 # interface GigabitEthernet1/0/25 shutdown stp edged-port enable # interface GigabitEthernet1/0/26 shutdown stp edged-port enable # interface GigabitEthernet1/0/27 shutdown stp edged-port enable # interface GigabitEthernet1/0/28 port link-type trunk port trunk permit vlan all # mac-address blackhole ec26-ca32-fdfc vlan 70 # ip route-static 0.0.0.0 0.0.0.0 172.18.60.1 ip route-static 192.168.72.0 255.255.255.0 10.11.13.2 ip route-static 192.168.73.0 255.255.255.0 10.11.13.2 ip route-static 192.168.74.0 255.255.255.0 10.11.13.2 ip route-static 192.168.75.0 255.255.255.0 10.11.13.1 ip route-static 192.168.177.0 255.255.255.0 192.168.60.1 # undo info-center enable info-center security-logfile enable # snmp-agent snmp-agent local-engineid 800063A203B0F963347F9C snmp-agent community write public snmp-agent community read public123 snmp-agent community read test@zabbix snmp-agent sys-info version all snmp-agent target-host trap address udp-domain 172.18.3.3 udp-port 161 params securityname public v2c snmp-agent target-host trap address udp-domain 192.168.100.245 udp-port 161 params securityname test@zabbix v2c snmp-agent trap enable stp tc snmp-agent trap enable default-route # dhcp server forbidden-ip 192.168.70.1 192.168.70.20 dhcp server forbidden-ip 192.168.70.254 dhcp server forbidden-ip 192.168.71.1 192.168.71.20 dhcp server forbidden-ip 192.168.71.254 # dhcp enable # ntp-service unicast-server 192.168.0.69 ntp-service unicast-server 172.18.63.1 # ftp server enable # ip https enable # load xml-configuration # user-interface aux 0 authentication-mode scheme user-interface vty 0 15 authentication-mode scheme # return <3_chang_core>