Realisations/2006-2007/Projet/Entreprise2/Switch: config_X450E_2007-01-19.cfg

File config_X450E_2007-01-19.cfg, 21.2 KB (added by alladoum, 18 years ago)
Line 
1#
2# Module devmgr configuration.
3#
4configure snmp sysName "X450e-24p"
5configure snmp sysContact "support@extremenetworks.com, +1 888 257 3000"
6configure slot 1 module X450e-24p
7
8#
9# Module vlan configuration.
10#
11configure vr VR-Default add ports 1-26
12configure vlan Default tag 1
13create vlan "vlan0"
14create vlan "vlan11"
15create vlan "vlan21"
16disable port 2
17disable port 6
18disable port 7
19disable port 8
20disable port 9
21disable port 10
22disable port 11
23disable port 12
24disable port 13
25disable port 14
26disable port 18
27disable port 19
28disable port 20
29disable port 22
30disable port 23
31disable port 24
32disable port 25
33configure ports 25 auto off speed 10000 duplex full
34disable port 26
35configure ports 26 auto off speed 10000 duplex full
36configure vlan vlan0 add ports 21 untagged
37configure vlan vlan11 add ports 3-5 untagged
38configure vlan vlan21 add ports 15-17 untagged
39configure vlan Mgmt ipaddress 192.168.0.254 255.255.255.0
40configure vlan vlan0 ipaddress 10.34.252.9 255.255.255.252
41enable ipforwarding vlan vlan0
42configure vlan vlan11 ipaddress 10.40.0.2 255.255.255.252
43enable ipforwarding vlan vlan11
44configure vlan vlan21 ipaddress 10.40.0.6 255.255.255.252
45enable ipforwarding vlan vlan21
46configure qosscheduler strict-priority
47
48#
49# Module fdb configuration.
50#
51configure fdb agingtime 300
52configure iparp vr VR-Control max_entries 4096
53configure iparp vr VR-Control max_pending_entries 256
54configure iparp vr VR-Control max_proxy_entries 256
55configure iparp vr VR-Control timeout 20
56enable iparp vr VR-Control checking
57enable iparp vr VR-Control refresh
58configure iparp vr VR-Default max_entries 4096
59configure iparp vr VR-Default max_pending_entries 256
60configure iparp vr VR-Default max_proxy_entries 256
61configure iparp vr VR-Default timeout 20
62enable iparp vr VR-Default checking
63enable iparp vr VR-Default refresh
64configure iparp vr VR-Mgmt max_entries 4096
65configure iparp vr VR-Mgmt max_pending_entries 256
66configure iparp vr VR-Mgmt max_proxy_entries 256
67configure iparp vr VR-Mgmt timeout 20
68enable iparp vr VR-Mgmt checking
69enable iparp vr VR-Mgmt refresh
70
71#
72# Module rtmgr configuration.
73#
74disable iproute sharing
75configure iproute priority blackhole 50
76configure iproute priority static 1100
77configure iproute priority icmp 1200
78configure iproute priority ebgp 1700
79configure iproute priority ibgp 1900
80configure iproute priority ospf-intra 2200
81configure iproute priority ospf-inter 2300
82configure iproute priority rip 2400
83configure iproute priority ospf-as-external 3100
84configure iproute priority ospf-extern1 3200
85configure iproute priority ospf-extern2 3300
86configure iproute priority bootp 5000
87configure iproute ipv6 priority blackhole 50
88configure iproute ipv6 priority static 1100
89configure iproute ipv6 priority icmp 1200
90configure iproute ipv6 priority ospfv3-intra 2200
91configure iproute ipv6 priority ospfv3-inter 2300
92configure iproute ipv6 priority RIPng 2400
93configure iproute ipv6 priority ospfv3-as-external 3100
94configure iproute ipv6 priority ospfv3-extern1 3200
95configure iproute ipv6 priority ospfv3-extern2 3300
96configure irdp broadcast
97configure irdp 450 600 1800 0
98disable irdp "Mgmt"
99disable irdp "vlan0"
100disable irdp "vlan11"
101disable irdp "vlan21"
102disable icmp address-mask vlan "Mgmt"
103enable icmp parameter-problem vlan "Mgmt"
104enable icmp port-unreachables vlan "Mgmt"
105enable icmp unreachables vlan "Mgmt"
106enable icmp redirects vlan "Mgmt"
107enable icmp time-exceeded vlan "Mgmt"
108disable icmp timestamp vlan "Mgmt"
109disable icmp address-mask vlan "vlan0"
110enable icmp parameter-problem vlan "vlan0"
111enable icmp port-unreachables vlan "vlan0"
112enable icmp unreachables vlan "vlan0"
113enable icmp redirects vlan "vlan0"
114enable icmp time-exceeded vlan "vlan0"
115disable icmp timestamp vlan "vlan0"
116disable icmp address-mask vlan "vlan11"
117enable icmp parameter-problem vlan "vlan11"
118enable icmp port-unreachables vlan "vlan11"
119enable icmp unreachables vlan "vlan11"
120enable icmp redirects vlan "vlan11"
121enable icmp time-exceeded vlan "vlan11"
122disable icmp timestamp vlan "vlan11"
123disable icmp address-mask vlan "vlan21"
124enable icmp parameter-problem vlan "vlan21"
125enable icmp port-unreachables vlan "vlan21"
126enable icmp unreachables vlan "vlan21"
127enable icmp redirects vlan "vlan21"
128enable icmp time-exceeded vlan "vlan21"
129disable icmp timestamp vlan "vlan21"
130enable ip-option loose-source-route
131enable ip-option strict-source-route
132enable ip-option record-timestamp
133enable ip-option router-alert
134enable ip-option record-route
135configure iproute add 10.34.252.8 255.255.255.252 10.34.252.9 1 vr VR-Default
136configure iproute add 10.40.0.8 255.255.255.252 10.40.0.5 1 vr VR-Default
137configure iproute add 10.40.0.12 255.255.255.252 10.40.0.1 1 vr VR-Default
138disable ipforwarding broadcast vlan "Mgmt"
139disable ipforwarding broadcast vlan "vlan0"
140disable ipforwarding broadcast vlan "vlan11"
141disable ipforwarding broadcast vlan "vlan21"
142disable icmp useredirects
143
144#
145# Module mcmgr configuration.
146#
147configure igmp snooping cache 32 64
148configure igmp snooping timer 260 260 vr VR-Default
149configure igmp snooping leave-timeout 1000 vr VR-Default
150configure MLD snooping timer 260 260 vr VR-Default
151configure MLD snooping leave-timeout 1000 vr VR-Default
152disable igmp snooping forward-mcrouter-only vr VR-Default
153disable MLD snooping forward-mcrouter-only vr VR-Default
154configure igmp 125 10 1 2 vr VR-Default
155configure MLD 125 10 1 2 vr VR-Default
156enable igmp snooping with-proxy vr VR-Default
157enable MLD snooping with-proxy vr VR-Default
158configure igmp snooping flood-list none vr VR-Default
159configure MLD snooping flood-list none vr VR-Default
160disable mvr
161configure mvr vlan Default mvr-address none
162configure mvr vlan Default static group none
163configure mvr vlan vlan0 mvr-address none
164configure mvr vlan vlan0 static group none
165configure mvr vlan vlan11 mvr-address none
166configure mvr vlan vlan11 static group none
167configure mvr vlan vlan21 mvr-address none
168configure mvr vlan vlan21 static group none
169
170#
171# Module aaa configuration.
172#
173disable radius mgmt-access
174configure radius mgmt-access timeout 3
175disable radius-accounting mgmt-access
176configure radius-accounting mgmt-access timeout 3
177disable radius netlogin
178configure radius netlogin timeout 3
179disable radius-accounting netlogin
180configure radius-accounting netlogin timeout 3
181disable tacacs
182configure tacacs timeout 3
183disable tacacs-accounting
184configure tacacs-accounting timeout 3
185disable tacacs-authorization
186configure account admin encrypted xJLi2a$As89cP1wHfZWnBK4Hc7ct0
187configure account user encrypted sOSi2a$fEKW8rKI0Etk6Cj6QTz3O/
188
189#
190# Module acl configuration.
191#
192enable access-list refresh blackhole
193enable access-list permit to-cpu
194
195#
196# Module cfgmgr configuration.
197#
198disable cli-config-logging
199configure cli max-sessions 8
200configure cli max-failed-logins 3
201configure banner
202
203
204configure idletimeout 20
205enable idletimeout
206
207#
208# Module dosprotect configuration.
209#
210disable dos-protect
211configure dos-protect interval 1
212configure dos-protect trusted-ports ports
213configure dos-protect type l3-protect alert-threshold 4000
214configure dos-protect type l3-protect notify-threshold 3500
215
216#
217# Module eaps configuration.
218#
219configure eaps fast-convergence off
220configure eaps config-warnings on
221disable eaps
222
223#
224# Module edp configuration.
225#
226configure edp advertisement-interval 60 holddown-interval 180
227enable edp ports 1
228enable edp ports 2
229enable edp ports 3
230enable edp ports 4
231enable edp ports 5
232enable edp ports 6
233enable edp ports 7
234enable edp ports 8
235enable edp ports 9
236enable edp ports 10
237enable edp ports 11
238enable edp ports 12
239enable edp ports 13
240enable edp ports 14
241enable edp ports 15
242enable edp ports 16
243enable edp ports 17
244enable edp ports 18
245enable edp ports 19
246enable edp ports 20
247enable edp ports 21
248enable edp ports 22
249enable edp ports 23
250enable edp ports 24
251enable edp ports 25
252enable edp ports 26
253
254#
255# Module elrp configuration.
256#
257disable elrp-client
258
259#
260# Module ems configuration.
261#
262disable log debug-mode
263create log filter DefaultFilter
264configure log filter DefaultFilter add event All
265enable log target memory-buffer
266configure log target memory-buffer filter DefaultFilter severity Debug-Data
267configure log target memory-buffer match Any
268configure log target memory-buffer format timestamp hundredths date mm-dd-yyyy event-name condition severity
269configure log target memory-buffer number-of-messages 1000
270enable log target nvram
271configure log target nvram filter DefaultFilter severity Warning
272configure log target nvram match Any
273configure log target nvram format timestamp hundredths date mm-dd-yyyy event-name condition severity
274disable log target console
275configure log target console filter DefaultFilter severity Info
276configure log target console match Any
277configure log target console format timestamp hundredths date mm-dd-yyyy event-name condition severity
278
279#
280# Module epm configuration.
281#
282configure sys-recovery-level All
283enable watchdog
284configure firmware install-on-demand
285enable cpu-monitoring interval 20 threshold 60
286
287#
288# Module esrp configuration.
289#
290configure esrp mode extended
291
292#
293# Module etmon configuration.
294#
295configure sflow sample-rate 8192
296configure sflow max-cpu-sample-limit 2000
297configure sflow poll-interval 20
298disable sflow
299disable rmon
300
301#
302# Module hal configuration.
303#
304configure iproute sharing max-gateways 4
305
306#
307# Module lldp configuration.
308#
309configure lldp transmit-interval 30
310configure lldp transmit-hold 4
311configure lldp reinitialize-delay 2
312configure lldp transmit-delay 2
313configure lldp snmp-notification-interval 5
314configure lldp med fast-start repeat-count 3
315
316#
317# Module netLogin configuration.
318#
319configure netlogin dot1x timers server-timeout 30 quiet-period 60 reauth-period 3600 supp-resp-timeout 30
320configure netlogin dot1x eapol-transmit-version v1
321enable netlogin logout-privilege
322enable netlogin session-refresh 3
323configure netlogin base-url "network-access.com"
324configure netlogin redirect-page "http://www.extremenetworks.com"
325configure netlogin banner ""
326
327#
328# Module netTools configuration.
329#
330configure sntp-client update-interval 64
331disable sntp-client
332
333#
334# Module ospf configuration.
335#
336configure ospf routerid automatic
337configure ospf spf-hold-time 3
338configure ospf metric-table 10M 10 100M 5 1G 4 10G 2
339configure ospf lsa-batch-interval 30
340configure ospf import-policy none
341configure ospf ase-limit 0
342disable ospf originate-default
343disable ospf use-ip-router-alert
344disable ospf
345configure ospf restart none
346configure ospf restart grace-period 120
347disable ospf export direct
348disable ospf export static
349disable ospf export rip
350disable ospf export e-bgp
351disable ospf export i-bgp
352configure ospf area 0.0.0.0 external-filter none
353configure ospf area 0.0.0.0 interarea-filter none
354configure ospf area 0.0.0.0 normal
355configure ospf vlan vlan0 area 0.0.0.0
356configure ospf vlan vlan0 cost automatic
357configure ospf vlan vlan0 priority 0
358configure ospf vlan vlan0 authentication none
359configure ospf vlan vlan0 timer 5 1 10 40
360configure ospf vlan vlan0 restart-helper none
361enable ospf vlan vlan0 restart-helper-lsa-check
362configure ospf vlan vlan11 area 0.0.0.0
363configure ospf vlan vlan11 cost automatic
364configure ospf vlan vlan11 priority 0
365configure ospf vlan vlan11 authentication none
366configure ospf vlan vlan11 timer 5 1 10 40
367configure ospf vlan vlan11 restart-helper none
368enable ospf vlan vlan11 restart-helper-lsa-check
369configure ospf vlan vlan21 area 0.0.0.0
370configure ospf vlan vlan21 cost automatic
371configure ospf vlan vlan21 priority 0
372configure ospf vlan vlan21 authentication none
373configure ospf vlan vlan21 timer 5 1 10 40
374configure ospf vlan vlan21 restart-helper none
375enable ospf vlan vlan21 restart-helper-lsa-check
376
377#
378# Module pim configuration.
379#
380disable pim
381configure pim crp timer 60
382configure pim register-suppress-interval 60 register-probe-interval 5
383configure pim register-checksum-to include-data
384
385#
386# Module poe configuration.
387#
388enable inline-power
389configure inline-power usage-threshold 70
390configure inline-power disconnect-precedence deny-port
391disable inline-power legacy slot 1
392enable inline-power ports 1
393configure inline-power operator-limit 15400 ports 1
394configure inline-power label "" ports 1
395configure inline-power priority low ports 1
396enable inline-power ports 2
397configure inline-power operator-limit 15400 ports 2
398configure inline-power label "" ports 2
399configure inline-power priority low ports 2
400enable inline-power ports 3
401configure inline-power operator-limit 15400 ports 3
402configure inline-power label "" ports 3
403configure inline-power priority low ports 3
404enable inline-power ports 4
405configure inline-power operator-limit 15400 ports 4
406configure inline-power label "" ports 4
407configure inline-power priority low ports 4
408enable inline-power ports 5
409configure inline-power operator-limit 15400 ports 5
410configure inline-power label "" ports 5
411configure inline-power priority low ports 5
412enable inline-power ports 6
413configure inline-power operator-limit 15400 ports 6
414configure inline-power label "" ports 6
415configure inline-power priority low ports 6
416enable inline-power ports 7
417configure inline-power operator-limit 15400 ports 7
418configure inline-power label "" ports 7
419configure inline-power priority low ports 7
420enable inline-power ports 8
421configure inline-power operator-limit 15400 ports 8
422configure inline-power label "" ports 8
423configure inline-power priority low ports 8
424enable inline-power ports 9
425configure inline-power operator-limit 15400 ports 9
426configure inline-power label "" ports 9
427configure inline-power priority low ports 9
428enable inline-power ports 10
429configure inline-power operator-limit 15400 ports 10
430configure inline-power label "" ports 10
431configure inline-power priority low ports 10
432enable inline-power ports 11
433configure inline-power operator-limit 15400 ports 11
434configure inline-power label "" ports 11
435configure inline-power priority low ports 11
436enable inline-power ports 12
437configure inline-power operator-limit 15400 ports 12
438configure inline-power label "" ports 12
439configure inline-power priority low ports 12
440enable inline-power ports 13
441configure inline-power operator-limit 15400 ports 13
442configure inline-power label "" ports 13
443configure inline-power priority low ports 13
444enable inline-power ports 14
445configure inline-power operator-limit 15400 ports 14
446configure inline-power label "" ports 14
447configure inline-power priority low ports 14
448enable inline-power ports 15
449configure inline-power operator-limit 15400 ports 15
450configure inline-power label "" ports 15
451configure inline-power priority low ports 15
452enable inline-power ports 16
453configure inline-power operator-limit 15400 ports 16
454configure inline-power label "" ports 16
455configure inline-power priority low ports 16
456enable inline-power ports 17
457configure inline-power operator-limit 15400 ports 17
458configure inline-power label "" ports 17
459configure inline-power priority low ports 17
460enable inline-power ports 18
461configure inline-power operator-limit 15400 ports 18
462configure inline-power label "" ports 18
463configure inline-power priority low ports 18
464enable inline-power ports 19
465configure inline-power operator-limit 15400 ports 19
466configure inline-power label "" ports 19
467configure inline-power priority low ports 19
468enable inline-power ports 20
469configure inline-power operator-limit 15400 ports 20
470configure inline-power label "" ports 20
471configure inline-power priority low ports 20
472enable inline-power ports 21
473configure inline-power operator-limit 15400 ports 21
474configure inline-power label "" ports 21
475configure inline-power priority low ports 21
476enable inline-power ports 22
477configure inline-power operator-limit 15400 ports 22
478configure inline-power label "" ports 22
479configure inline-power priority low ports 22
480enable inline-power ports 23
481configure inline-power operator-limit 15400 ports 23
482configure inline-power label "" ports 23
483configure inline-power priority low ports 23
484enable inline-power ports 24
485configure inline-power operator-limit 15400 ports 24
486configure inline-power label "" ports 24
487configure inline-power priority low ports 24
488
489#
490# Module rip configuration.
491#
492configure rip garbagetime 120
493configure rip import-policy none
494configure rip routetimeout 180
495configure rip updatetime 30
496disable rip originate-default
497disable rip use-ip-router-alert
498disable rip aggregation
499enable rip poisonreverse
500enable rip splithorizon
501enable rip triggerupdates
502enable rip
503disable rip export direct
504disable rip export static
505disable rip export ospf-intra
506disable rip export ospf-inter
507disable rip export ospf-extern1
508disable rip export ospf-extern2
509disable rip export e-bgp
510disable rip export i-bgp
511configure rip add vlan vlan0
512configure rip vlan vlan0 route-policy out none
513configure rip vlan vlan0 route-policy in none
514configure rip vlan vlan0 trusted-gateway none
515configure rip vlan vlan0 rxmode any
516configure rip vlan vlan0 txmode v2only
517configure rip vlan vlan0 cost 1
518configure rip add vlan vlan11
519configure rip vlan vlan11 route-policy out none
520configure rip vlan vlan11 route-policy in none
521configure rip vlan vlan11 trusted-gateway none
522configure rip vlan vlan11 rxmode any
523configure rip vlan vlan11 txmode v2only
524configure rip vlan vlan11 cost 1
525configure rip add vlan vlan21
526configure rip vlan vlan21 route-policy out none
527configure rip vlan vlan21 route-policy in none
528configure rip vlan vlan21 trusted-gateway none
529configure rip vlan vlan21 rxmode any
530configure rip vlan vlan21 txmode v2only
531configure rip vlan vlan21 cost 1
532
533#
534# Module ripng configuration.
535#
536disable ripng
537configure ripng garbagetime 120
538configure ripng updatetime 30
539configure ripng routetimeout 180
540
541#
542# Module snmpMaster configuration.
543#
544configure snmpv3 engine-id 03:00:04:96:27:c8:3a
545configure snmpv3 add user admin authentication md5 hex 93:0a:71:2b:6a:a8:0b:0f:eb:20:e8:a0:d8:29:9d:5d privacy hex 93:0a:71:2b:6a:a8:0b:0f:eb:20:e8:a0:d8:29:9d:5d
546configure snmpv3 add user initial
547configure snmpv3 add user initialmd5 authentication md5 hex 4f:3b:90:c0:25:86:be:60:c6:97:14:83:5c:2d:44:c5
548configure snmpv3 add user initialsha authentication sha hex b4:ab:24:92:9d:d8:31:ba:b1:e2:6e:f3:46:17:02:55:8b:fe:d1:98
549configure snmpv3 add user initialmd5Priv authentication md5 hex 33:0b:ff:c2:51:07:ee:32:9f:ca:2e:b2:55:82:64:cd privacy hex 33:0b:ff:c2:51:07:ee:32:9f:ca:2e:b2:55:82:64:cd
550configure snmpv3 add user initialshaPriv authentication sha hex 80:61:f8:6d:d8:0f:1b:f7:2d:b6:cf:a0:95:4c:f8:75:f3:ee:c8:f1 privacy hex 80:61:f8:6d:d8:0f:1b:f7:2d:b6:cf:a0:95:4c:f8:75:f3:ee:c8:f1
551configure snmpv3 add group v1v2c_ro user v1v2c_ro sec-model snmpv1
552configure snmpv3 add group v1v2c_rw user v1v2c_rw sec-model snmpv1
553configure snmpv3 add group v1v2c_ro user v1v2c_ro sec-model snmpv2c
554configure snmpv3 add group v1v2c_rw user v1v2c_rw sec-model snmpv2c
555configure snmpv3 add group admin user admin sec-model usm
556configure snmpv3 add group initial user initial sec-model usm
557configure snmpv3 add group initial user initialmd5 sec-model usm
558configure snmpv3 add group initial user initialsha sec-model usm
559configure snmpv3 add group initial user initialmd5Priv sec-model usm
560configure snmpv3 add group initial user initialshaPriv sec-model usm
561configure snmpv3 add access admin sec-model usm sec-level priv read-view defaultAdminView write-view defaultAdminView notify-view defaultNotifyView
562 configure snmpv3 add access initial sec-model usm sec-level noauth read-view defaultUserView notify-view defaultNotifyView
563configure snmpv3 add access initial sec-model usm sec-level authnopriv read-view defaultUserView write-view defaultUserView notify-view defaultNotifyView
564configure snmpv3 add access v1v2c_ro sec-model snmpv1 sec-level noauth read-view defaultUserView notify-view defaultNotifyView
565configure snmpv3 add access v1v2c_ro sec-model snmpv2c sec-level noauth read-view defaultUserView notify-view defaultNotifyView
566 configure snmpv3 add access v1v2c_rw sec-model snmpv1 sec-level noauth read-view defaultUserView write-view defaultUserView notify-view defaultNotifyView
567configure snmpv3 add access v1v2c_rw sec-model snmpv2c sec-level noauth read-view defaultUserView write-view defaultUserView notify-view defaultNotifyView
568configure snmpv3 add access v1v2cNotifyGroup sec-model snmpv1 sec-level noauth notify-view defaultNotifyView
569configure snmpv3 add access v1v2cNotifyGroup sec-model snmpv2c sec-level noauth notify-view defaultNotifyView
570configure snmpv3 add mib-view defaultUserView subtree 1 type included
571configure snmpv3 add mib-view defaultUserView subtree 1.3.6.1.6.3.16 type excluded
572configure snmpv3 add mib-view defaultUserView subtree 1.3.6.1.6.3.18 type excluded
573configure snmpv3 add mib-view defaultUserView subtree 1.3.6.1.6.3.15.1.2.2.1.4 type excluded
574configure snmpv3 add mib-view defaultUserView subtree 1.3.6.1.6.3.15.1.2.2.1.6 type excluded
575configure snmpv3 add mib-view defaultUserView subtree 1.3.6.1.6.3.15.1.2.2.1.9 type excluded
576 configure snmpv3 add mib-view defaultAdminView subtree 1 type included
577configure snmpv3 add mib-view defaultNotifyView subtree 1 type included
578configure snmpv3 add community private name private user v1v2c_rw
579configure snmpv3 add community public name public user v1v2c_ro
580configure snmpv3 add notify defaultNotify tag defaultNotify
581enable snmp access
582enable snmp traps
583
584#
585# Module stp configuration.
586#
587configure mstp region 00049627c83a
588configure mstp revision 3
589configure mstp format 0
590create stpd s0
591configure stpd s0 tag 0
592configure stpd s0 mode dot1d
593configure stpd s0 forwarddelay 15
594configure stpd s0 hellotime 2
595configure stpd s0 maxage 20
596configure stpd s0 priority 32768
597disable stpd s0 rapid-root-failover
598configure stpd s0 default-encapsulation dot1d
599enable stpd s0 auto-bind vlan Default
600disable stpd s0
601
602#
603# Module telnetd configuration.
604#
605configure telnet vr all
606
607#
608# Module tftpd configuration.
609#
610
611#
612# Module thttpd configuration.
613#
614
615#
616# Module vrrp configuration.
617#