WS5820-52TP-WiNet

[xingzheng3-3]dis cu
#
version 7.1.070, Release 6127P01
#
sysname xingzheng3-3
#
voice-vlan mac-address 0001-e300-0000 mask ffff-ff00-0000
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
irf member 1 priority 1
#
dot1x
dot1x authentication-method eap
#
lldp global enable
#
loopback-detection global enable vlan 1 to 4094
loopback-detection interval-time 300
#
password-recovery enable
#
vlan 1
#
vlan 11
#
vlan 20
description changlingdao/fuzonggongchengshi
#
vlan 30
description dianzidangan
#
vlan 40
description gonghui
#
vlan 50
description jianchashenjibu
#
vlan 60
description changwugongzuobu
#
vlan 70
description caiwubu
#
vlan 80
description gongchengbu
#
vlan 90
description shichangyunyingbu
#
vlan 100
description ranliaoguanlibu
#
vlan 110
description wuzigongyingbu
#
vlan 120
description anquanjianchabu
#
vlan 130
description redongfenchang
#
vlan 140
description diankongfenchang
#
vlan 150
description renliziyuanbu
#
vlan 160
description sixiangzhengzhigongzuobu
#
vlan 170
description fadianfenchang
#
vlan 180
description meizhijianyanzhongxin
#
vlan 190
description shebeibu
#
vlan 200
description zonghe
#
vlan 210
description fuwuqi
#
vlan 220
description link to VPN
#
vlan 240
#
vlan 300
#
vlan 310
#
vlan 320
#
vlan 340
#
vlan 350
#
vlan 360
#
vlan 370
#
vlan 390
#
vlan 400
#
vlan 999
#
stp global enable
#
interface NULL0
#
interface Vlan-interface1
ip address 172.16.100.6 255.255.255.0
dhcp client identifier ascii f474887b8770-VLAN0001
#
interface GigabitEthernet1/0/1
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/2
port access vlan 350
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/3
port access vlan 370
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/4
port access vlan 350
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/5
port access vlan 350
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/6
port access vlan 350
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/7
port access vlan 130
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/8
port access vlan 350
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/9
port access vlan 350
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/10
port access vlan 350
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/11
port access vlan 310
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/12
port access vlan 310
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/13
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/14
port access vlan 310
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/15
port access vlan 310
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/16
port access vlan 310
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/17
port access vlan 90
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/18
port access vlan 130
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/19
port access vlan 310
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/20
port access vlan 130
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/21
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/22
port access vlan 90
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/23
port access vlan 90
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/24
port access vlan 90
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/25
port access vlan 70
dot1x
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/26
port access vlan 350
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/27
port access vlan 90
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/28
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/29
port access vlan 310
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/30
port access vlan 90
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/31
port access vlan 70
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/32
port access vlan 90
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/33
port access vlan 140
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/34
port access vlan 60
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/35
port access vlan 140
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/36
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/37
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/38
port access vlan 310
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/39
port access vlan 370
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/40
port access vlan 130
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/41
port access vlan 300
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/42
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/43
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/44
port access vlan 60
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/45
port access vlan 30
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/46
port access vlan 999
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/47
port access vlan 90
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/48
port link-type trunk
port trunk permit vlan all
loopback-detection enable vlan 1 to 4094
loopback-detection action shutdown
#
interface GigabitEthernet1/0/49
port link-type trunk
port trunk permit vlan all
combo enable auto
#
interface GigabitEthernet1/0/50
port link-type trunk
port trunk permit vlan all
combo enable auto
#
interface GigabitEthernet1/0/51
port link-type trunk
port trunk permit vlan all
#
interface GigabitEthernet1/0/52
port link-type trunk
port trunk permit vlan all
#
scheduler logfile size 16
#
line class aux
user-role network-admin
#
line class vty
user-role network-operator
#
line aux 0
user-role network-admin
#
line vty 0 4
authentication-mode scheme
user-role network-admin
user-role network-operator
protocol inbound ssh
idle-timeout 0 0
#
line vty 5 63
authentication-mode scheme
user-role network-admin
user-role network-operator
idle-timeout 0 0
#
ip route-static 0.0.0.0 0 172.16.100.1
#
snmp-agent
snmp-agent local-engineid 800063A280F474887B877B00000001
snmp-agent community write private
snmp-agent community read public
snmp-agent sys-info version all
#
ssh server enable
ssh user admin service-type stelnet authentication-type password
ssh user ccsr_admin service-type stelnet authentication-type password
#
acl number 3050
rule 5 deny tcp destination-port eq 445
rule 15 deny udp destination-port eq 445
rule 20 deny tcp destination-port eq 139
rule 25 deny udp destination-port eq netbios-ssn
rule 30 deny tcp destination-port eq 137
rule 35 deny udp destination-port eq netbios-ns
rule 40 deny tcp destination-port eq 138
rule 45 deny udp destination-port eq netbios-dgm
rule 50 deny tcp destination-port eq 135
rule 55 permit ip
#
radius scheme dot1x
primary authentication 10.66.163.199
primary accounting 10.66.163.199
key authentication cipher $c$3$i5UR8NC3vIkh+ssaXICnJUx6rBFA+i4=
key accounting cipher $c$3$PtCIkkz1mlRhHWrEwi25PaifCk8JJqRL
user-name-format without-domain
#
domain dot1x
authentication default radius-scheme dot1x
authorization default radius-scheme dot1x
accounting default radius-scheme dot1x
#
domain system
#
aaa session-limit http 6
aaa session-limit https 6
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name level-1
description Predefined level-1 role
#
role name level-2
description Predefined level-2 role
#
role name level-3
description Predefined level-3 role
#
role name level-4
description Predefined level-4 role
#
role name level-5
description Predefined level-5 role
#
role name level-6
description Predefined level-6 role
#
role name level-7
description Predefined level-7 role
#
role name level-8
description Predefined level-8 role
#
role name level-9
description Predefined level-9 role
#
role name level-10
description Predefined level-10 role
#
role name level-11
description Predefined level-11 role
#
role name level-12
description Predefined level-12 role
#
role name level-13
description Predefined level-13 role
#
role name level-14
description Predefined level-14 role
#
user-group system
#
local-user admin class manage
password hash $h$6$zLoFw89qLcptsS80$7rPjirqGF2836HNEIqeRxAA94ewxBEz/Q3RfuLCOfopEzKNgjMpTdml3Vl10VM5wuTlpYxJJNtG7HNM0y/vXJA==
service-type ssh terminal
authorization-attribute user-role level-15
authorization-attribute user-role network-operator
#
local-user ccsr_admin class manage
password hash $h$6$LuNtSaOlA7osxc7+$Wgz24nAVKB9AVgKlnnkIJ4ZuCBS8dSmjXG4vY9Wf3eAbpc5jgJutFI0KUBH5qIymJ8ZQif2GA9I+DuHWHXg/kw==
service-type ssh terminal
authorization-attribute user-role level-15
authorization-attribute user-role network-operator
#
cloud-management server domain oasis.h3c.com
#
return