3652交换机的配置文档

[fz-H5100-12]display current-configuration
#
sysname fz-H5100-12
#
super password level 3 cipher S8<O,Xa#)S+Q=^Q`MAF4<1!!
#
port-security enable
#
dot1x retry 5
dot1x timer handshake-period 30
dot1x authentication-method pap
#
radius scheme system
radius scheme LAN-access
server-type extended
primary authentication 199.0.0.4
primary accounting 199.0.0.4
secondary authentication 199.0.0.10
secondary accounting 199.0.0.10
key authentication cmbcadm
key accounting cmbcadm
radius scheme LAN-access-anonymous
server-type standard
radius scheme admin
server-type extended
primary authentication 199.0.0.4
secondary authentication 199.0.0.10
accounting optional
key authentication cmbcadm
user-name-format without-domain
#
domain admin
scheme radius-scheme LAN-access
vlan-assignment-mode string
domain internet
scheme radius-scheme LAN-access
vlan-assignment-mode string
domain oa
scheme radius-scheme LAN-access
vlan-assignment-mode string
domain project
scheme radius-scheme LAN-access
vlan-assignment-mode string
domain system
scheme radius-scheme admin local
domain testint
vlan-assignment-mode string
domain testoa
vlan-assignment-mode string
#
local-user admin
password cipher S8<O,Xa#)S+Q=^Q`MAF4<1!!
service-type telnet
level 3
#
stp bpdu-protection
stp enable
#
acl number 3000
rule 0 deny IP
rule 1 permit UDP destination-port eq bootps
rule 2 permit UDP destination-port eq bootpc
rule 3 permit IP destination 199.0.0.0 0.0.0.63
rule 4 permit IP destination 195.0.0.100 0
rule 5 permit IP destination 195.0.1.1 0
acl number 3001
rule 0 permit IP
#
vlan 1
name VLAN0001
#
vlan 29
name VLAN0029
#
vlan 50
name VLAN0050
#
vlan 91
name VLAN0091
#
vlan 100
name VLAN0100
#
vlan 616
name VLAN0616
#
vlan 800
name VLAN0800
#
vlan 950
description wangguang
name VLAN0950
#
vlan 1001
description INTERNET
name VLAN1001
#
interface Vlan-interface950
ip address 199.208.0.12 255.255.255.0
#
interface Aux1/0/0
#
interface Ethernet1/0/1
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/2
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/3
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate

-limit enable
arp rate-limit 15
#
interface Ethernet1/0/4
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/5
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/6
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/7
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/8
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/9
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/10
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/11
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/12
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/13
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/14
stp edged-port enable

broadcast-su

ppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/15
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/16
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/17
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/18
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/19
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/20
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/21
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/22
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/23
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/24
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppressio
n 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot

1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/25
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/26
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/27
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/28
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/29
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/30
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/31
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/32
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/33
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/34
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-che
ck
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/

0/35
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/36
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/37
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/38
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/39
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/40
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/41
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/42
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/43
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/44
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rat
e-limit 15
#
interface Ethernet1/0/45
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan

1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/46
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/47
stp edged-port enable
broadcast-suppression pps 100
multicast-suppression 50
unicast-suppression 50
port access vlan 1001
dot1x supp-proxy-check logoff
dot1x version-check
arp detection trust
arp rate-limit enable
arp rate-limit 15
#
interface Ethernet1/0/48
port link-type trunk
port trunk permit vlan all
dhcp-snooping trust
#
interface GigabitEthernet1/1/1
#
interface GigabitEthernet1/1/2
#
interface GigabitEthernet1/1/3
#
interface GigabitEthernet1/1/4
#
undo irf-fabric authentication-mode
#
interface NULL0
#
management-vlan 950
#
dhcp-snooping
#
ip route-static 0.0.0.0 0.0.0.0 199.208.0.254 preference 60
#
user-interface aux 0 7
user-interface vty 0 4
user privilege level 3
set authentication password cipher S8<O,Xa#)S+Q=^Q`MAF4<1!!
idle-timeout 3000 0
#
return
[fz-H5100-12]
[fz-H5100-12]
[fz-H5100-12]