Huawei 2318

sysname mde-VHE-H2318-ESHILOME
#
super password level 3 cipher a/Y_73%YKJSQ=^Q`MAF4<1!!
#
lldp enable
#
undo  arp learning  strict
#
loopback-detect enable
#
aaa
local-user gestion password cipher a/Y_73%YKJSQ=^Q`MAF4<1!!
 local-user gestion level 3
 local-user gestion ftp-directory flash:
 local-user gestion service-type telnet
local-user soporte password cipher U<VCEG`!T4GQ=^Q`MAF4<1!!
 local-user soporte level 1
 local-user soporte ftp-directory flash:
 local-user soporte service-type telnet

#
stp instance 0 root secondary
stp bpdu-protection
stp enable
//////Are you sure to change global STP status?[Y/N]   yes////// No se Pega


#
acl number 2999
 description GESTION                    
 rule 0 permit source 10.156.0.1 0.0.255.0
 rule 1 permit source 10.153.0.0 0.0.255.255
 rule 2 permit source 200.30.79.0 0.0.0.255
 rule 3 permit source 10.165.0.0 0.0.255.255
 rule 4 permit source 10.166.0.0 0.0.255.255
 rule 5 permit source 10.167.0.0 0.0.0.255
 rule 6 permit source 10.159.125.0 0.0.0.255
#
acl number 3000
 description limitante de trafico inbound
 rule 0 permit ip
#
vlan 1024
 description GESTION
#

vlan 1270
 description PLANT-7054_MUN_MED
vlan 1271
 description PLANT-7063_MUN_MED
vlan 1272
 description PLANT-7066_MUN_MED
vlan 1273
 description PLANT-7068_MUN_MED
vlan 1274
 description PLANT-7098_MUN_MED

#
interface Vlan 1024
 description GESTION
 ip address 10.156.25.20 255.255.255.0
#
 ntp-service source-interface Vlan 1024
 ntp-service unicast-server 10.156.25.1
#
#
interface Ethernet0/0/1
 stp enable
 description IE_D_PLANT-7068_MUN_MED_ESCUELA_HIPOLITO_LONDOÑO_MESA_(fenix:40037383)_VHE_AAM4
 port link-type access
 port default vlan 1273
 stp edged-port enable
 qos lr outbound cir 6144 cbs 256000
 traffic-limit inbound acl 3000 rule 0 cir 6144 pir 6144 cbs 64000 pbs 64000
 undo ntdp  enable
 undo ndp enable
 undo loopback-detect enable
 bpdu disable
 loopback-detect recovery-time 60
 loopback-detect enable
 broadcast-suppression 5
 multicast-suppression 5
 unicast-suppression 5

#
interface Ethernet0/0/2
 stp disable
 shutdown
#                                        
interface Ethernet0/0/3
 stp disable
 shutdown
#
interface Ethernet0/0/4
 stp disable
 shutdown
#
interface Ethernet0/0/5
 stp disable
 shutdown
#
interface Ethernet0/0/6
 stp disable
 shutdown
#
interface Ethernet0/0/7
 stp disable
 shutdown
#
interface Ethernet0/0/8
 stp disable
 shutdown
#                                        
interface Ethernet0/0/9
 stp disable
 shutdown
#
interface Ethernet0/0/10
 stp disable
 shutdown
#
interface Ethernet0/0/11
 stp disable
 shutdown
#
interface Ethernet0/0/12
 stp disable
 shutdown
#
interface Ethernet0/0/13
 stp disable
 shutdown
#
interface Ethernet0/0/14
 stp disable
 shutdown
#                                        
interface Ethernet0/0/15
 stp disable
 shutdown
#
interface Ethernet0/0/16
 stp disable
 shutdown
#

interface GigabitEthernet0/0/1
 undo shutdown
 stp loop-protection
 port link-type trunk
 port trunk allow-pass vlan all
 undo ntdp  enable
 lldp  enable
 combo-port fiber
 negotiation auto
 undo  loopback-detect enable
 unicast-suppression 1
 multicast-suppression 1
 broadcast-suppression 1
#
interface GigabitEthernet0/0/2
 undo shutdown
 stp loop-protection
 port link-type trunk
 port trunk allow-pass vlan all
 undo ntdp  enable
 lldp  enable
 combo-port fiber
 negotiation auto
 undo  loopback-detect enable
 unicast-suppression 1
 multicast-suppression 1
 broadcast-suppression 1
#

 
#
#
ip route-static 0.0.0.0 0.0.0.0 10.156.25.1
#                                        
 snmp-agent
 snmp-agent community write C0stum3r_Un3 acl 2999
 snmp-agent sys-info version v2c v3
 snmp-agent sys-info location MUN_MEDELLIN
 snmp-agent target-host trap address udp-domain 10.159.125.124 params securityname Un3_telc0 v2c
 snmp-agent target-host trap address udp-domain 10.159.125.125 params securityname Un3_telc0 v2c
 snmp-agent trap source Vlan 1024

#

#
header login information %
. Todo acceso a este dispositivo es
prohibido a menos que  exista una razOn previamente demostrada, autorizada,
asignada y controlada en funciOn de los requerimientos del negocio y/o del
cliente.
%



user-interface con 0
 authentication-mode password
 set authentication password cipher 1'5L@DR>L,/Q=^Q`MAF4<1!!
user-interface vty 0 4
 acl 2999 inbound
 authentication-mode aaa
#

clock timezone CO minus 5