!Software Version V200R022C00SPC500
#
sysname DSW-C-1-MDF.PEK3-G
#
stp instance 0 priority 0
stp bpdu-protection
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name dot1xmac_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name multi_authen_profile
authentication-profile name portal_authen_profile
#
domain nacs.com admin
#
http server-source -i MEth0/0/1
#
clock timezone Beijing add 08:00:00
#
dhcp enable
#
radius-server template default
#
hwtacacs-server template nacs
 hwtacacs-server authentication 101.200.147.225
 hwtacacs-server authentication 47.107.62.135 secondary
 hwtacacs-server authorization 101.200.147.225
 hwtacacs-server authorization 47.107.62.135 secondary
 hwtacacs-server accounting 101.200.147.225
 hwtacacs-server accounting 47.107.62.135 secondary
 hwtacacs-server shared-key cipher Q9JAFKegkGNE4wHX
#
pki realm default
 certificate-check none
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
aaa
 authentication-scheme default
  authentication-mode local
 authentication-scheme radius
  authentication-mode radius
 authentication-scheme tacacs1
  authentication-mode hwtacacs local
 authorization-scheme default
  authorization-mode local
 authorization-scheme tacacs2
  authorization-mode hwtacacs local
  authorization-cmd 15 hwtacacs local
 accounting-scheme default
  accounting-mode none
 accounting-scheme tacacs3
  accounting-mode hwtacacs
  accounting start-fail online
 recording-scheme tacacs0
  recording-mode hwtacacs nacs
 cmd recording-scheme tacacs0
 local-aaa-user password policy administrator
  password history record number 0
  password expire 0
 domain default
  authentication-scheme radius
  accounting-scheme default
  radius-server default
 domain default_admin
  authentication-scheme default
  accounting-scheme default
 domain nacs.com
  authentication-scheme tacacs1
  accounting-scheme tacacs3
  authorization-scheme tacacs2
  hwtacacs-server nacs
 local-user cnadmin password irreversible-cipher $1c$6ktS7PiboE$"B1/Xl*=W>A4i60xuzpDNzNK7>KhkMb%_T7ll`~%$
 local-user cnadmin privilege level 15
 local-user cnadmin service-type terminal ssh
#
interface Vlanif1
#
interface MEth0/0/1
 ip address 192.168.1.253 255.255.255.0
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
#
interface GigabitEthernet0/0/6
#
interface GigabitEthernet0/0/7
#
interface GigabitEthernet0/0/8
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
#
interface GigabitEthernet0/0/13
#
interface GigabitEthernet0/0/14
#
interface GigabitEthernet0/0/15
#
interface GigabitEthernet0/0/16
#
interface GigabitEthernet0/0/17
#
interface GigabitEthernet0/0/18
#
interface GigabitEthernet0/0/19
#
interface GigabitEthernet0/0/20
#
interface GigabitEthernet0/0/21
#
interface GigabitEthernet0/0/22
#
interface GigabitEthernet0/0/23
#
interface GigabitEthernet0/0/24
 description 
 mad detect mode direct
#
interface GigabitEthernet1/0/1
#
interface GigabitEthernet1/0/2
#
interface GigabitEthernet1/0/3
#
interface GigabitEthernet1/0/4
#
interface GigabitEthernet1/0/5
#
interface GigabitEthernet1/0/6
#
interface GigabitEthernet1/0/7
#
interface GigabitEthernet1/0/8
#
interface GigabitEthernet1/0/9
#
interface GigabitEthernet1/0/10
#
interface GigabitEthernet1/0/11
#
interface GigabitEthernet1/0/12
#
interface GigabitEthernet1/0/13
#
interface GigabitEthernet1/0/14
#
interface GigabitEthernet1/0/15
#
interface GigabitEthernet1/0/16
#
interface GigabitEthernet1/0/17
#
interface GigabitEthernet1/0/18
#
interface GigabitEthernet1/0/19
#
interface GigabitEthernet1/0/20
#
interface GigabitEthernet1/0/21
#
interface GigabitEthernet1/0/22
#
interface GigabitEthernet1/0/23
#
interface GigabitEthernet1/0/24
 description 
 mad detect mode direct
#
interface XGigabitEthernet0/0/1
#
interface XGigabitEthernet0/0/2
#
interface XGigabitEthernet0/0/3
#
interface XGigabitEthernet0/0/4
#
interface XGigabitEthernet1/0/1
#
interface XGigabitEthernet1/0/2
#
interface XGigabitEthernet1/0/3
#
interface XGigabitEthernet1/0/4
#
interface NULL0
#
undo icmp name timestamp-request receive
#
snmp-agent
snmp-agent community read cipher %^%#nS%_S3fBfFdRfJ:<r>a0b<GVH{X|Q8y`DO~,pVD/%|mG>MDV'"J7%u7e1,AMgWJnTUPO`W=&Z>@$EQwJ%^%# acl 2099 alias cmn
snmp-agent community complexity-check disable
snmp-agent sys-info version v2c v3
stelnet server enable
ssh user cnadmin
ssh user cnadmin authentication-type password
ssh user cnadmin service-type stelnet
ssh client first-time enable
ssh server-source all-interface
ssh server cipher aes256_ctr aes128_ctr
ssh server hmac sha2_256
ssh server key-exchange dh_group16_sha512 dh_group15_sha512 dh_group14_sha256 ecdh_sha2_nistp256 dh_group_exchange_sha256
ssh client cipher aes256_ctr aes128_ctr
ssh client hmac sha2_256
ssh client key-exchange dh_group16_sha512 dh_group15_sha512 dh_group14_sha256 ecdh_sha2_nistp256 dh_group_exchange_sha256
ssh server dh-exchange min-len 2048
ssh server publickey rsa rsa_sha2_512 rsa_sha2_256
#
user-interface con 0
 authentication-mode password
 set authentication password cipher $1a$86{TLWBX17$<K!Q$F0X="=smaAS%,:RQ0D$'k<tw%2FjWCpUx9V$
user-interface vty 0 4
 authentication-mode aaa
 user privilege level 3
user-interface vty 16 20
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#
ops
#
remote-unit
#
return