Skip to main content

Hirschmann - Exemple configuration


! GRS1042-6T6Z Configuration

! Version: HiOS-3A-08.6.00

! Build Date: 2021-01-14 12:51

network hidiscovery mode read-only 
no network hidiscovery operation 
network management access web timeout 30 
network out-of-band parms 10.10.10.1 255.255.255.0 0.0.0.0 
network out-of-band protocol none 
network management access add 2 
network management access add 3 
network management access add 4 
network management access modify 1 ip 10.10.10.0 
network management access modify 2 ip 192.168.33.59 
network management access modify 3 ip 192.168.7.247 
network management access modify 4 ip 192.168.7.248 
network management access modify 1 mask 24 
network management access modify 2 mask 32 
network management access modify 3 mask 32 
network management access modify 4 mask 32 
network management access modify 1 http disable 
network management access modify 2 http disable 
network management access modify 3 http disable 
network management access modify 4 http disable 
network management access modify 1 snmp disable 
network management access modify 2 snmp disable 
network management access modify 3 snmp disable 
network management access modify 1 telnet disable 
network management access modify 2 telnet disable 
network management access modify 3 telnet disable 
network management access modify 4 telnet disable 
network management access modify 1 iec61850-mms disable 
network management access modify 2 iec61850-mms disable 
network management access modify 3 iec61850-mms disable 
network management access modify 4 iec61850-mms disable 
network management access modify 1 modbus-tcp disable 
network management access modify 2 modbus-tcp disable 
network management access modify 3 modbus-tcp disable 
network management access modify 4 modbus-tcp disable 
network management access modify 1 ethernet-ip disable 
network management access modify 2 ethernet-ip disable 
network management access modify 3 ethernet-ip disable 
network management access modify 4 ethernet-ip disable 
network management access modify 1 profinet-io disable 
network management access modify 2 profinet-io disable 
network management access modify 3 profinet-io disable 
network management access modify 4 profinet-io disable 

vlan database
vlan add 30
vlan add 31
vlan add 32
vlan add 33
vlan add 39
name 30 encodeurs 
name 31 cameras 
name 32 admin 
name 33 video 
name 39 interco 
routing add 30 
routing add 31 
routing add 32 
routing add 33 
routing add 39 
igmp-snooping vlan-id 30 mode 
igmp-snooping vlan-id 31 mode 
igmp-snooping vlan-id 30 querier mode 
igmp-snooping vlan-id 31 querier mode 
exit
network management vlan 32 
network parms 0.0.0.0 0.0.0.0 0.0.0.0 
network protocol none 
! dot1x mac-authentication-bypass password  ""
configure
device-status monitor link-failure 
device-status monitor ring-redundancy 
device-status monitor module-removal 
device-status module 2 enable 
device-status module 3 enable 
mrp domain add default-domain
mrp domain modify port secondary 1/2 fixed-backup disable 
mrp domain modify advanced-mode enable 
mrp domain modify manager-priority 32768 
mrp domain modify mode client 
mrp domain modify name "" 
mrp domain modify recovery-delay 200ms 
mrp domain modify vlan 0 
mrp domain modify operation enable 
mrp operation enable 
no dns cache adminstate 
no dns client cache adminstate 
clock summer-time mode recurring 
clock summer-time recurring start last sun mar 02:00 
clock summer-time recurring end last sun oct 03:00 
config remote-backup operation 
config remote-backup destination ftp://192.168.33.59/Hirschmann/SW601X.xml 
! config remote-backup username ****** 
! config remote-backup password ****** 
config envm auto-update sd disable 
config envm auto-update usb disable 
config envm config-save sd disable 
config envm config-save usb disable 
config envm sshkey-auto-update sd disable 
config envm sshkey-auto-update usb disable 
no http server 
igmp-snooping forward-unknown query-ports 
igmp-snooping mode 
igmp-snooping querier mode 
monitor session 1 destination interface 1/8 
monitor session 1 source interface 3/8 operation enable
monitor session 1 source interface 3/8 direction txrx 
monitor session 1 mode enable 
ip routing 
ip vrrp operation 
ip vrrp trap auth-failure 
ip vrrp trap new-master 
ip vrrp domain 1 member-advertisement enable 
ip vrrp domain 2 member-advertisement enable 
ip vrrp domain 3 member-advertisement enable 
ip vrrp domain 4 member-advertisement enable 
ip vrrp domain 6 member-advertisement enable 
ip default-route add 192.168.39.249
passwords max-login-attempts 5 
passwords min-length 8 
ptp v2-transparent-clock vlan-priority 4 
no inlinepower operation 
security-status monitor pwd-policy-inactive 
security-status monitor extnvm-upd-enabled 
security-status monitor no-link-enabled 
security-status monitor sysmon-enabled 
security-status trap 
sntp client server add 1 192.168.33.1 port 123 description "NTP SE BPNL" 
sntp client server mode 1 enable 
sntp client operation 
sntp client request-interval 3600 
spanning-tree forceversion mstp 
spanning-tree forward-time 4 
spanning-tree hello-time 1 
spanning-tree max-age 6 
spanning-tree mst instance add 1 
spanning-tree mst instance modify 0 priority 36864 
spanning-tree mst instance modify 1 priority 32768 
spanning-tree mst instance modify 1 vlan add 33
spanning-tree mst instance modify 1 vlan add 39
spanning-tree configuration name BPNL 
spanning-tree configuration revision 30 
system location "Switch federateur : Site X" 
system name SW601X 

snmp trap add "Zabbix" 192.168.7.248:162
snmp trap mode Zabbix enable 
mac notification operation 
mac notification interval 60 
ip access-list extended name Vlan31_IN index 3 permit src 238.0.0.0-0.255.255.255 dst 172.20.0.0-0.0.255.255
ip access-list extended name Vlan31_IN index 4 permit src 172.20.0.0-0.0.255.255 dst 238.0.0.0-0.255.255.255
ip access-list extended name Vlan31_IN index 5 permit src 10.100.0.0-0.0.0.255 dst 172.20.0.0-0.0.255.255
ip access-list extended name Vlan31_IN index 6 permit src 172.20.0.0-0.0.255.255 dst 10.100.0.0-0.0.0.255
ip access-list extended name Vlan31_IN index 7 permit src 10.2.0.0-0.0.0.255 dst 172.20.0.0-0.0.255.255
ip access-list extended name Vlan31_IN index 8 permit src 172.20.0.0-0.0.255.255 dst 10.2.0.0-0.0.0.255
ip access-list extended name Vlan31_IN index 9 permit src 10.242.2.0-0.0.0.255 dst 172.20.0.0-0.0.255.255
ip access-list extended name Vlan31_IN index 10 permit src 172.20.0.0-0.0.255.255 dst 10.242.2.0-0.0.0.255
ip access-list extended name Vlan31_IN index 11 permit src 192.168.33.1-0.0.0.0 dst 172.20.0.0-0.0.255.255
ip access-list extended name Vlan31_IN index 12 permit src 172.20.0.0-0.0.255.255 dst 192.168.33.1-0.0.0.0
ip access-list extended name Vlan31_IN index 13 permit src 192.168.33.59-0.0.0.0 dst 172.20.0.0-0.0.255.255
ip access-list extended name Vlan31_IN index 14 permit src 172.20.0.0-0.0.255.255 dst 192.168.33.59-0.0.0.0
ip access-list extended name Vlan31_IN index 15 permit src 192.168.7.247-0.0.0.0 dst 172.20.0.0-0.0.255.255
ip access-list extended name Vlan31_IN index 16 permit src 172.20.0.0-0.0.255.255 dst 192.168.7.247-0.0.0.0
ip access-list extended name Vlan31_IN index 17 permit src 192.168.7.248-0.0.0.0 dst 172.20.0.0-0.0.255.255
ip access-list extended name Vlan31_IN index 18 permit src 172.20.0.0-0.0.255.255 dst 192.168.7.248-0.0.0.0
ip access-list extended name Vlan32_IN index 1 permit src any dst 224.0.0.0-0.255.255.255
ip access-list extended name Vlan32_IN index 2 permit src 192.168.32.0-0.0.0.255 dst 192.168.32.0-0.0.0.255
ip access-list extended name Vlan32_IN index 3 permit src 10.100.0.0-0.0.0.255 dst 192.168.32.0-0.0.0.255
ip access-list extended name Vlan32_IN index 4 permit src 192.168.32.0-0.0.0.255 dst 10.100.0.0-0.0.0.255
ip access-list extended name Vlan32_IN index 5 permit src 10.2.0.0-0.0.0.255 dst 192.168.32.0-0.0.0.255
ip access-list extended name Vlan32_IN index 6 permit src 192.168.32.0-0.0.0.255 dst 10.2.0.0-0.0.0.255
ip access-list extended name Vlan32_IN index 7 permit src 10.2.0.0-0.0.0.255 dst 192.168.32.0-0.0.0.255
ip access-list extended name Vlan32_IN index 8 permit src 192.168.32.0-0.0.0.255 dst 10.2.0.0-0.0.0.255
ip access-list extended name Vlan32_IN index 9 permit src 10.242.2.0-0.0.0.255 dst 192.168.32.0-0.0.0.255
ip access-list extended name Vlan32_IN index 10 permit src 192.168.32.0-0.0.0.255 dst 10.242.2.0-0.0.0.255
ip access-list extended name Vlan32_IN index 11 permit src 192.168.33.1-0.0.0.0 dst 192.168.32.0-0.0.0.255
ip access-list extended name Vlan32_IN index 12 permit src 192.168.32.0-0.0.0.255 dst 192.168.33.1-0.0.0.0
ip access-list extended name Vlan32_IN index 13 permit src 192.168.33.59-0.0.0.0 dst 192.168.32.0-0.0.0.255
ip access-list extended name Vlan32_IN index 14 permit src 192.168.32.0-0.0.0.255 dst 192.168.33.59-0.0.0.0
ip access-list extended name Vlan32_IN index 15 permit src 192.168.7.247-0.0.0.0 dst 192.168.32.0-0.0.0.255
ip access-list extended name Vlan32_IN index 16 permit src 192.168.32.0-0.0.0.255 dst 192.168.7.247-0.0.0.0
ip access-list extended name Vlan32_IN index 17 permit src 192.168.7.248-0.0.0.0 dst 192.168.32.0-0.0.0.255
ip access-list extended name Vlan32_IN index 18 permit src 192.168.32.0-0.0.0.255 dst 192.168.7.248-0.0.0.0
ip access-list extended name Vlan33_IN index 1 permit src any dst 224.0.0.0-0.255.255.255
ip access-list extended name Vlan33_IN index 2 permit src 192.168.33.0-0.0.0.255 dst 192.168.33.0-0.0.0.255
ip access-list extended name Vlan33_IN index 3 permit src 10.100.0.0-0.0.0.255 dst 192.168.33.0-0.0.0.255
ip access-list extended name Vlan33_IN index 4 permit src 192.168.33.0-0.0.0.255 dst 10.100.0.0-0.0.0.255
ip access-list extended name Vlan33_IN index 5 permit src 10.2.0.0-0.0.0.255 dst 192.168.33.0-0.0.0.255
ip access-list extended name Vlan33_IN index 6 permit src 192.168.33.0-0.0.0.255 dst 10.2.0.0-0.0.0.255
ip access-list extended name Vlan33_IN index 7 permit src 10.242.2.0-0.0.0.255 dst 192.168.33.0-0.0.0.255
ip access-list extended name Vlan33_IN index 8 permit src 192.168.33.0-0.0.0.255 dst 10.242.2.0-0.0.0.255
ip access-list extended name Vlan33_IN index 9 permit src 192.168.7.247-0.0.0.0 dst 192.168.33.0-0.0.0.255
ip access-list extended name Vlan33_IN index 10 permit src 192.168.33.0-0.0.0.255 dst 192.168.7.247-0.0.0.0
ip access-list extended name Vlan33_IN index 11 permit src 192.168.7.248-0.0.0.0 dst 192.168.33.0-0.0.0.255
ip access-list extended name Vlan33_IN index 12 permit src 192.168.33.0-0.0.0.255 dst 192.168.7.248-0.0.0.0
ip access-list extended name Vlan33_IN index 13 permit src 192.168.1.0-0.0.0.255 dst 192.168.33.1-0.0.0.0
ip access-list extended name Vlan33_IN index 14 permit src 192.168.33.1-0.0.0.0 dst 192.168.1.0-0.0.0.255
ip access-list extended name Vlan33_IN index 15 permit src 172.20.0.0-0.0.255.255 dst 192.168.33.1-0.0.0.0
ip access-list extended name Vlan33_IN index 16 permit src 192.168.33.1-0.0.0.0 dst 172.20.0.0-0.0.255.255
ip access-list extended name Vlan33_IN index 17 permit src 192.168.32.0-0.0.0.255 dst 192.168.33.1-0.0.0.0
ip access-list extended name Vlan33_IN index 18 permit src 192.168.33.1-0.0.0.0 dst 192.168.32.0-0.0.0.255
ip access-list extended name Vlan33_IN index 19 permit src 192.168.1.0-0.0.0.255 dst 192.168.33.59-0.0.0.0
ip access-list extended name Vlan33_IN index 20 permit src 192.168.33.59-0.0.0.0 dst 192.168.1.0-0.0.0.255
ip access-list extended name Vlan33_IN index 21 permit src 172.20.0.0-0.0.255.255 dst 192.168.33.59-0.0.0.0
ip access-list extended name Vlan33_IN index 22 permit src 192.168.33.59-0.0.0.0 dst 172.20.0.0-0.0.255.255
ip access-list extended name Vlan33_IN index 23 permit src 192.168.32.0-0.0.0.255 dst 192.168.33.59-0.0.0.0
ip access-list extended name Vlan33_IN index 24 permit src 192.168.33.59-0.0.0.0 dst 192.168.32.0-0.0.0.255
ip access-list extended name Vlan33_IN index 25 permit src 192.168.28.5-0.0.0.0 dst 192.168.33.11-0.0.0.0
ip access-list extended name Vlan33_IN index 26 permit src 192.168.33.11-0.0.0.0 dst 192.168.28.5-0.0.0.0
ip access-list extended name Vlan33_IN index 27 permit src 192.168.28.5-0.0.0.0 dst 192.168.33.12-0.0.0.0
ip access-list extended name Vlan33_IN index 28 permit src 192.168.33.12-0.0.0.0 dst 192.168.28.5-0.0.0.0
ip access-list extended name Vlan33_IN index 29 permit src 192.168.28.5-0.0.0.0 dst 192.168.33.21-0.0.0.0
ip access-list extended name Vlan33_IN index 30 permit src 192.168.33.21-0.0.0.0 dst 192.168.28.5-0.0.0.0
ip access-list extended name Vlan33_IN index 31 permit src 192.168.28.5-0.0.0.0 dst 192.168.33.22-0.0.0.0
ip access-list extended name Vlan33_IN index 32 permit src 192.168.33.22-0.0.0.0 dst 192.168.28.5-0.0.0.0
ip access-list extended name Vlan33_IN index 33 permit src 192.168.28.5-0.0.0.0 dst 192.168.33.23-0.0.0.0
ip access-list extended name Vlan33_IN index 34 permit src 192.168.33.23-0.0.0.0 dst 192.168.28.5-0.0.0.0
ip access-list extended name Vlan33_IN index 35 permit src 192.168.28.5-0.0.0.0 dst 192.168.33.31-0.0.0.0
ip access-list extended name Vlan33_IN index 36 permit src 192.168.33.31-0.0.0.0 dst 192.168.28.5-0.0.0.0
ip access-list extended name Vlan33_IN index 37 permit src 192.168.28.5-0.0.0.0 dst 192.168.33.32-0.0.0.0
ip access-list extended name Vlan33_IN index 38 permit src 192.168.33.32-0.0.0.0 dst 192.168.28.5-0.0.0.0
ip access-list extended name Vlan33_IN index 39 permit src 192.168.28.5-0.0.0.0 dst 192.168.33.33-0.0.0.0
ip access-list extended name Vlan33_IN index 40 permit src 192.168.33.33-0.0.0.0 dst 192.168.28.5-0.0.0.0
ip access-list extended name Vlan33_IN index 41 permit src 192.168.28.5-0.0.0.0 dst 192.168.33.34-0.0.0.0
ip access-list extended name Vlan33_IN index 42 permit src 192.168.33.34-0.0.0.0 dst 192.168.28.5-0.0.0.0
ip access-list extended name Vlan33_IN index 43 permit src 192.168.28.5-0.0.0.0 dst 192.168.33.35-0.0.0.0
ip access-list extended name Vlan33_IN index 44 permit src 192.168.33.35-0.0.0.0 dst 192.168.28.5-0.0.0.0
ip access-list extended name Vlan33_IN index 45 permit src 192.168.28.5-0.0.0.0 dst 192.168.33.36-0.0.0.0
ip access-list extended name Vlan33_IN index 46 permit src 192.168.33.36-0.0.0.0 dst 192.168.28.5-0.0.0.0
ip access-list extended name Vlan33_IN index 47 permit src 192.168.0.150-0.0.0.0 dst 192.168.33.21-0.0.0.0
ip access-list extended name Vlan33_IN index 48 permit src 192.168.33.21-0.0.0.0 dst 192.168.0.150-0.0.0.0
ip access-list extended name Vlan33_IN index 49 permit src 192.168.0.150-0.0.0.0 dst 192.168.33.22-0.0.0.0
ip access-list extended name Vlan33_IN index 50 permit src 192.168.33.22-0.0.0.0 dst 192.168.0.150-0.0.0.0
ip access-list extended name Vlan33_IN index 51 permit src 192.168.0.150-0.0.0.0 dst 192.168.33.23-0.0.0.0
ip access-list extended name Vlan33_IN index 52 permit src 192.168.33.23-0.0.0.0 dst 192.168.0.150-0.0.0.0
ip access-list extended name Vlan33_IN index 53 permit src 192.168.0.151-0.0.0.0 dst 192.168.33.21-0.0.0.0
ip access-list extended name Vlan33_IN index 54 permit src 192.168.33.21-0.0.0.0 dst 192.168.0.151-0.0.0.0
ip access-list extended name Vlan33_IN index 55 permit src 192.168.0.151-0.0.0.0 dst 192.168.33.22-0.0.0.0
ip access-list extended name Vlan33_IN index 56 permit src 192.168.33.22-0.0.0.0 dst 192.168.0.151-0.0.0.0
ip access-list extended name Vlan33_IN index 57 permit src 192.168.0.151-0.0.0.0 dst 192.168.33.23-0.0.0.0
ip access-list extended name Vlan33_IN index 58 permit src 192.168.33.23-0.0.0.0 dst 192.168.0.151-0.0.0.0
ip access-group name Vlan31_IN vlan 31 out sequence 1
ip access-group name Vlan32_IN vlan 32 out sequence 2
ip access-group name Vlan33_IN vlan 32 out sequence 3

interface 1/1
mac notification operation 
device-status link-alarm 
igmp-snooping static-query-port 
name HR-SW607Y 
power-state 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no storm-control flow-control 
vlan participation include 30
vlan tagging 30
vlan participation include 31
vlan tagging 31
vlan participation include 32
vlan tagging 32
vlan participation include 33
vlan tagging 33
vlan participation include 39
vlan tagging 39
exit

interface 1/2
mac notification operation 
device-status link-alarm 
igmp-snooping static-query-port 
name HR-SW602X 
power-state 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no storm-control flow-control 
vlan participation include 30
vlan tagging 30
vlan participation include 31
vlan tagging 31
vlan participation include 32
vlan tagging 32
vlan participation include 33
vlan tagging 33
vlan participation include 39
vlan tagging 39
exit

interface 1/3
mac notification operation 
device-status link-alarm 
name "UPlink HP" 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no storm-control flow-control 
vlan participation exclude 1
vlan participation exclude 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation include 33
vlan tagging 33
vlan participation include 39
vlan tagging 39
exit

interface 1/4
device-status link-alarm 
name PGATEX1 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation exclude 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation include 33
vlan participation exclude 39
vlan pvid 33 
exit

interface 1/5
mac notification operation 
no auto-negotiate
device-status link-alarm 
name RC-SW603X 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
no storm-control flow-control 
vlan participation include 30
vlan tagging 30
vlan participation include 31
vlan tagging 31
vlan participation include 32
vlan tagging 32
vlan participation exclude 33
vlan participation exclude 39
exit

interface 1/6
shutdown 
ptp v2-boundary-clock vlan-priority 4 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation exclude 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation exclude 33
vlan participation exclude 39
exit

interface 1/7
device-status link-alarm 
name prov-existantRS30 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation include 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation exclude 33
vlan participation exclude 39
vlan pvid 30 
exit

interface 1/8
device-status link-alarm 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation exclude 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation include 33
vlan tagging 33
vlan participation exclude 39
vlan pvid 33 
exit

interface 1/9
device-status link-alarm 
name SVIDNVRW1 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation include 30
vlan tagging 30
vlan participation include 31
vlan tagging 31
vlan participation exclude 32
vlan participation include 33
vlan tagging 33
vlan participation exclude 39
exit

interface 1/10
shutdown 
ptp v2-boundary-clock vlan-priority 4 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation exclude 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation exclude 33
vlan participation exclude 39
exit

interface 1/11
name SVIDNVRX1 
ptp v2-boundary-clock vlan-priority 4 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation exclude 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation include 33
vlan participation exclude 39
vlan pvid 33 
exit

interface 1/12
name SVIDNVRX2 
ptp v2-boundary-clock vlan-priority 4 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation exclude 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation include 33
vlan participation exclude 39
vlan pvid 33 
exit

interface 2/1
device-status link-alarm 
name SVIDNVRX1 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation include 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation exclude 33
vlan participation exclude 39
vlan pvid 30 
exit

interface 2/2
device-status link-alarm 
name SVIDNVRX2 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation include 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation exclude 33
vlan participation exclude 39
vlan pvid 30 
exit

interface 2/3
device-status link-alarm 
name SDAIANAX1 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation include 30
vlan tagging 30
vlan participation include 31
vlan tagging 31
vlan participation exclude 32
vlan participation include 33
vlan tagging 33
vlan participation exclude 39
exit

interface 2/4
device-status link-alarm 
name SDAIANAX2 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation include 30
vlan tagging 30
vlan participation include 31
vlan tagging 31
vlan participation exclude 32
vlan participation include 33
vlan tagging 33
vlan participation exclude 39
exit

interface 2/5
device-status link-alarm 
name SDAIANAX3 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation include 30
vlan tagging 30
vlan participation include 31
vlan tagging 31
vlan participation exclude 32
vlan participation include 33
vlan tagging 33
vlan participation exclude 39
exit

interface 2/6
device-status link-alarm 
name SDAIANAX4 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation include 30
vlan tagging 30
vlan participation include 31
vlan tagging 31
vlan participation exclude 32
vlan participation include 33
vlan tagging 33
vlan participation exclude 39
exit

interface 2/7
device-status link-alarm 
name SDAIANAX5 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation include 30
vlan tagging 30
vlan participation include 31
vlan tagging 31
vlan participation exclude 32
vlan participation include 33
vlan tagging 33
vlan participation exclude 39
vlan pvid 31 
exit

interface 2/8
shutdown 
ptp v2-boundary-clock vlan-priority 4 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation exclude 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation exclude 33
vlan participation exclude 39
exit

interface 3/1
device-status link-alarm 
name PDECX1 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation exclude 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation include 33
vlan participation exclude 39
vlan pvid 33 
exit

interface 3/2
device-status link-alarm 
name PDECX2 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation exclude 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation include 33
vlan participation exclude 39
vlan pvid 33 
exit

interface 3/3
device-status link-alarm 
name PDECX3 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation exclude 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation include 33
vlan participation exclude 39
vlan pvid 33 
exit

interface 3/4
device-status link-alarm 
name PDECX4 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation exclude 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation include 33
vlan participation exclude 39
vlan pvid 33 
exit

interface 3/5
device-status link-alarm 
name PVIDX1 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation exclude 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation include 33
vlan participation exclude 39
vlan pvid 33 
exit

interface 3/6
device-status link-alarm 
name PVIDX2 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation exclude 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation include 33
vlan participation exclude 39
vlan pvid 33 
exit

interface 3/7
device-status link-alarm 
name PVIDX3 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation exclude 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation include 33
vlan participation exclude 39
vlan pvid 33 
exit

interface 3/8
device-status link-alarm 
name PVIDX4 
ptp v2-boundary-clock vlan-priority 4 
security-status no-link 
no spanning-tree edge-auto 
no spanning-tree mode 
vlan participation exclude 1
vlan participation exclude 30
vlan participation exclude 31
vlan participation exclude 32
vlan participation include 33
vlan participation exclude 39
vlan pvid 33 
exit

interface vlan/30
ip routing 
ip address primary 192.168.1.250 255.255.255.0 
no ip proxy-arp operation 
no ip irdp operation 
ip irdp address 224.0.0.1 
ip irdp holdtime 1800 
ip irdp maxadvertinterval 600 
ip irdp minadvertinterval 450 
ip irdp preference 0 
ip ospf area-id 0.0.0.0 
no ip ospf operation 
ip ospf link-type broadcast 
ip ospf priority 1 
ip ospf transmit-delay 1 
ip ospf retransmit-interval 5 
ip ospf hello-interval 10 
ip ospf dead-interval 40 
ip ospf cost auto 
no ip ospf mtu-ignore 
ip ospf authentication type none 
ip ospf authentication key-id 0 
no ip ospf fast-hello 
ip rip authentication type none 
ip rip authentication key-id 0 
ip rip send-version ripv2 
ip rip receive-version both 
no ip igmp operation 
ip igmp querier query-interval 125 
ip igmp version 3 
ip igmp robustness 2 
ip igmp querier last-member-interval 10 
ip igmp querier max-response-time 100 
ip mcast ttl-threshold 1 
ip icmp unreachables 
ip icmp redirects 
ip mtu 1500 
no ip netdirbcast 
ip vrrp add 4 priority 130 interval 1000 preempt enable advertisement-ip 224.0.0.18 preempt-delay 0 notify-ip 192.168.1.251 master-candidate 192.168.1.250 domain-id 4 domain-role supervisor accept-mode enable 
ip vrrp virtual-address add 4 192.168.1.254 
no signal-contact 1 link-alarm 
no ip pim operation 
ip pim hello-interval 30 
no ip pim sparse bsr-border 
ip pim sparse dr-priority 1 
ip pim sparse join-prune-interval 60 
no ip dvmrp operation 
ip dvmrp metric 1 
no device-status link-alarm 
no shutdown 
name encodeurs 
security-status no-link 
exit

interface vlan/31
ip routing 
ip address primary 172.20.0.250 255.255.0.0 
no ip proxy-arp operation 
no ip irdp operation 
ip irdp address 224.0.0.1 
ip irdp holdtime 1800 
ip irdp maxadvertinterval 600 
ip irdp minadvertinterval 450 
ip irdp preference 0 
ip ospf area-id 0.0.0.0 
no ip ospf operation 
ip ospf link-type broadcast 
ip ospf priority 1 
ip ospf transmit-delay 1 
ip ospf retransmit-interval 5 
ip ospf hello-interval 10 
ip ospf dead-interval 40 
ip ospf cost auto 
no ip ospf mtu-ignore 
ip ospf authentication type none 
ip ospf authentication key-id 0 
no ip ospf fast-hello 
ip rip authentication type none 
ip rip authentication key-id 0 
ip rip send-version ripv2 
ip rip receive-version both 
no ip igmp operation 
ip igmp querier query-interval 125 
ip igmp version 3 
ip igmp robustness 2 
ip igmp querier last-member-interval 10 
ip igmp querier max-response-time 100 
ip mcast ttl-threshold 1 
ip icmp unreachables 
ip icmp redirects 
ip mtu 1500 
no ip netdirbcast 
ip vrrp add 1 priority 130 interval 1000 preempt enable advertisement-ip 224.0.0.18 preempt-delay 0 notify-ip 172.20.0.251 master-candidate 172.20.0.250 domain-id 1 domain-role supervisor accept-mode enable 
ip vrrp virtual-address add 1 172.20.0.254 
no signal-contact 1 link-alarm 
no ip pim operation 
ip pim hello-interval 30 
no ip pim sparse bsr-border 
ip pim sparse dr-priority 1 
ip pim sparse join-prune-interval 60 
no ip dvmrp operation 
ip dvmrp metric 1 
no device-status link-alarm 
no shutdown 
name cameras 
security-status no-link 
exit

interface vlan/32
ip routing 
ip address primary 192.168.32.250 255.255.255.0 
no ip proxy-arp operation 
no ip irdp operation 
ip irdp address 224.0.0.1 
ip irdp holdtime 1800 
ip irdp maxadvertinterval 600 
ip irdp minadvertinterval 450 
ip irdp preference 0 
ip ospf area-id 0.0.0.0 
no ip ospf operation 
ip ospf link-type broadcast 
ip ospf priority 1 
ip ospf transmit-delay 1 
ip ospf retransmit-interval 5 
ip ospf hello-interval 10 
ip ospf dead-interval 40 
ip ospf cost auto 
no ip ospf mtu-ignore 
ip ospf authentication type none 
ip ospf authentication key-id 0 
no ip ospf fast-hello 
ip rip authentication type none 
ip rip authentication key-id 0 
ip rip send-version ripv2 
ip rip receive-version both 
no ip igmp operation 
ip igmp querier query-interval 125 
ip igmp version 3 
ip igmp robustness 2 
ip igmp querier last-member-interval 10 
ip igmp querier max-response-time 100 
ip mcast ttl-threshold 1 
ip icmp unreachables 
ip icmp redirects 
ip mtu 1500 
no ip netdirbcast 
ip vrrp add 2 priority 130 interval 1000 preempt enable advertisement-ip 224.0.0.18 preempt-delay 0 notify-ip 192.168.32.251 master-candidate 192.168.32.250 domain-id 2 domain-role supervisor accept-mode enable 
ip vrrp virtual-address add 2 192.168.32.254 
no signal-contact 1 link-alarm 
no ip pim operation 
ip pim hello-interval 30 
no ip pim sparse bsr-border 
ip pim sparse dr-priority 1 
ip pim sparse join-prune-interval 60 
no ip dvmrp operation 
ip dvmrp metric 1 
no device-status link-alarm 
no shutdown 
name admin 
security-status no-link 
exit

interface vlan/33
ip routing 
ip address primary 192.168.33.250 255.255.255.0 
no ip proxy-arp operation 
no ip irdp operation 
ip irdp address 224.0.0.1 
ip irdp holdtime 1800 
ip irdp maxadvertinterval 600 
ip irdp minadvertinterval 450 
ip irdp preference 0 
ip ospf area-id 0.0.0.0 
no ip ospf operation 
ip ospf link-type broadcast 
ip ospf priority 1 
ip ospf transmit-delay 1 
ip ospf retransmit-interval 5 
ip ospf hello-interval 10 
ip ospf dead-interval 40 
ip ospf cost auto 
no ip ospf mtu-ignore 
ip ospf authentication type none 
ip ospf authentication key-id 0 
no ip ospf fast-hello 
ip rip authentication type none 
ip rip authentication key-id 0 
ip rip send-version ripv2 
ip rip receive-version both 
no ip igmp operation 
ip igmp querier query-interval 125 
ip igmp version 3 
ip igmp robustness 2 
ip igmp querier last-member-interval 10 
ip igmp querier max-response-time 100 
ip mcast ttl-threshold 1 
ip icmp unreachables 
ip icmp redirects 
ip mtu 1500 
no ip netdirbcast 
ip vrrp add 3 priority 130 interval 1000 preempt enable advertisement-ip 224.0.0.18 preempt-delay 0 notify-ip 192.168.33.251 master-candidate 192.168.33.250 domain-id 3 domain-role supervisor accept-mode enable 
ip vrrp virtual-address add 3 192.168.33.254 
no signal-contact 1 link-alarm 
no ip pim operation 
ip pim hello-interval 30 
no ip pim sparse bsr-border 
ip pim sparse dr-priority 1 
ip pim sparse join-prune-interval 60 
no ip dvmrp operation 
ip dvmrp metric 1 
no device-status link-alarm 
no shutdown 
name video 
security-status no-link 
exit

interface vlan/39
ip routing 
ip address primary 192.168.39.250 255.255.255.0 
no ip proxy-arp operation 
no ip irdp operation 
ip irdp address 224.0.0.1 
ip irdp holdtime 1800 
ip irdp maxadvertinterval 600 
ip irdp minadvertinterval 450 
ip irdp preference 0 
ip ospf area-id 0.0.0.0 
no ip ospf operation 
ip ospf link-type broadcast 
ip ospf priority 1 
ip ospf transmit-delay 1 
ip ospf retransmit-interval 5 
ip ospf hello-interval 10 
ip ospf dead-interval 40 
ip ospf cost auto 
no ip ospf mtu-ignore 
ip ospf authentication type none 
ip ospf authentication key-id 0 
no ip ospf fast-hello 
ip rip authentication type none 
ip rip authentication key-id 0 
ip rip send-version ripv2 
ip rip receive-version both 
no ip igmp operation 
ip igmp querier query-interval 125 
ip igmp version 3 
ip igmp robustness 2 
ip igmp querier last-member-interval 10 
ip igmp querier max-response-time 100 
ip mcast ttl-threshold 1 
ip icmp unreachables 
ip icmp redirects 
ip mtu 1500 
no ip netdirbcast 
ip vrrp add 6 priority 130 interval 1000 preempt enable advertisement-ip 224.0.0.18 preempt-delay 0 notify-ip 192.168.39.251 master-candidate 192.168.39.250 domain-id 6 domain-role member accept-mode enable 
ip vrrp virtual-address add 6 192.168.39.254 
no signal-contact 1 link-alarm 
no ip pim operation 
ip pim hello-interval 30 
no ip pim sparse bsr-border 
ip pim sparse dr-priority 1 
ip pim sparse join-prune-interval 60 
no ip dvmrp operation 
ip dvmrp metric 1 
no device-status link-alarm 
no shutdown 
name interco 
no security-status no-link 
exit

users add "AdminBPNL"
users add "AdminBYES"
users add "snmpBPNL"
users delete admin 
users access-role AdminBPNL administrator 
users access-role AdminBYES administrator 
users access-role snmpBPNL guest 
users lock-status AdminBPNL unlock 
users lock-status AdminBYES unlock 
users lock-status snmpBPNL unlock 
! users password AdminBPNL "********"
! users password AdminBYES "********"
! users password snmpBPNL "********"
users password-policy-check AdminBPNL disable 
users password-policy-check AdminBYES disable 
users password-policy-check snmpBPNL disable 
users snmpv3 authentication AdminBPNL sha1 
users snmpv3 authentication AdminBYES sha1 
users snmpv3 authentication snmpBPNL sha1 
users snmpv3 encryption AdminBPNL aescfb128 
users snmpv3 encryption AdminBYES aescfb128 
users snmpv3 encryption snmpBPNL aescfb128 
users enable AdminBPNL 
users enable AdminBYES 
users enable snmpBPNL 
exit