!

Software Version V200R019C00SPC500

#
sysname YN4-WAN-HX-01-S5731_H24T4XC-A05&A06-34U
#
info-center loghost source MEth0/0/1
info-center loghost 10.173.3.66
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name dot1xmac_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name multi_authen_profile
authentication-profile name portal_authen_profile
#
set save-configuration interval 10080 delay 1
set save-configuration backup-to-server server 10.171.3.69 transport-type tftp
#
telnet server enable
#
clock timezone Thailand add 07:00:00
#
diffserv domain default
#
ip vpn-instance default
ipv4-family
#
radius-server template Luxshare_ict
radius-server shared-key cipher %^%#i)|t>Gwa54Zg;v>RseSSg5f-+,XyLDgs./-h`0{W%^%#
radius-server authentication 10.171.2.200 1812 vpn-instance default source ip-
address 10.173.94.2 weight 80
radius-server authentication 10.171.2.201 1812 vpn-instance default source ip-
address 10.173.94.2 weight 80
radius-server accounting 10.171.2.200 1813 vpn-instance default source ip-address
10.173.94.2 weight 80
radius-server accounting 10.171.2.201 1813 vpn-instance default source ip-address
10.173.94.2 weight 80
radius-server retransmit 2
radius-server template default
#
pki realm default
certificate-check none
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
drop-profile default
#
aaa
authentication-scheme default
authentication-mode local
authentication-scheme luxshare_ict_auth
authentication-mode radius local
authentication-scheme radius
authentication-mode radius
authorization-scheme default
authorization-mode local
accounting-scheme default
 accounting-mode none
accounting-scheme luxshare_ict_acc
accounting-mode radius
local-aaa-user password policy administrator
password history record number 0
password expire 0
domain default
authentication-scheme radius
accounting-scheme default
radius-server default
domain default_admin
authentication-scheme luxshare_ict_auth
accounting-scheme luxshare_ict_acc
radius-server Luxshare_ict
local-user admin password irreversible-cipher $1c$8RHZ4"$6+8$sR2!I@\
ow><&qH(rMVG$`yVN;~W^I7T1xr1W-~n:$
local-user admin privilege level 3
local-user admin service-type telnet ssh http
local-user sshadmin password irreversible-cipher $1c$\gXv'5B:qQ$'ky\YWpD|%up)5!
Il+})G|;TGqL5pHfdK8>hl.RN$
local-user sshadmin privilege level 3
local-user sshadmin service-type telnet ssh
#
ntp-service server disable
ntp-service ipv6 server disable
ntp-service unicast-server 10.173.95.1
#
interface Vlanif1
#
interface MEth0/0/1
ip binding vpn-instance default
ip address 10.173.94.2 255.255.255.0
#
interface MEth0/0/2
#
interface Eth-Trunk1
undo portswitch
ip address 10.173.0.17 255.255.255.252
mode lacp
#
interface Eth-Trunk4
undo portswitch
description OA-Core-HX-01&02-S6730 Eth-Trunk1
ip address 10.173.0.10 255.255.255.252
#
interface Eth-Trunk24
undo portswitch
description Connect DMVPN-G0/0/2-3
ip address 10.173.0.33 255.255.255.252
mode lacp
lacp preempt enable
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
#
interface GigabitEthernet0/0/6
#
interface GigabitEthernet0/0/7
#
interface GigabitEthernet0/0/8
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
#
interface GigabitEthernet0/0/13
#
interface GigabitEthernet0/0/14
#
interface GigabitEthernet0/0/15
#
interface GigabitEthernet0/0/16
#
interface GigabitEthernet0/0/17
#
interface GigabitEthernet0/0/18
#
interface GigabitEthernet0/0/19
#
interface GigabitEthernet0/0/20
#
interface GigabitEthernet0/0/21
#
interface GigabitEthernet0/0/22
#
interface GigabitEthernet0/0/23
#
interface GigabitEthernet0/0/24
#
interface GigabitEthernet1/0/1
undo portswitch
ip address 10.173.0.21 255.255.255.252
#
interface GigabitEthernet1/0/2
#
interface GigabitEthernet1/0/3
#
interface GigabitEthernet1/0/4
#
interface GigabitEthernet1/0/5
#
interface GigabitEthernet1/0/6
#
interface GigabitEthernet1/0/7
#
interface GigabitEthernet1/0/8
#
interface GigabitEthernet1/0/9
#
interface GigabitEthernet1/0/10
#
interface GigabitEthernet1/0/11
#
interface GigabitEthernet1/0/12
#
interface GigabitEthernet1/0/13
#
interface GigabitEthernet1/0/14
#
interface GigabitEthernet1/0/15
#
interface GigabitEthernet1/0/16
#
interface GigabitEthernet1/0/17
#
interface GigabitEthernet1/0/18
#
interface GigabitEthernet1/0/19
#
interface GigabitEthernet1/0/20
#
interface GigabitEthernet1/0/21
#
interface GigabitEthernet1/0/22
description SSL-VPN-FW-ASA-5508-G1/0/2
eth-trunk 1
#
interface GigabitEthernet1/0/23
eth-trunk 24
#
interface GigabitEthernet1/0/24
mad detect mode direct
#
interface GigabitEthernet2/0/1
#
interface GigabitEthernet2/0/2
#
interface GigabitEthernet2/0/3
#
interface GigabitEthernet2/0/4
#
interface GigabitEthernet2/0/5
#
interface GigabitEthernet2/0/6
#
interface GigabitEthernet2/0/7
#
interface GigabitEthernet2/0/8
#
interface GigabitEthernet2/0/9
#
interface GigabitEthernet2/0/10
#
interface GigabitEthernet2/0/11
#
interface GigabitEthernet2/0/12
#
interface GigabitEthernet2/0/13
#
interface GigabitEthernet2/0/14
#
interface GigabitEthernet2/0/15
#
interface GigabitEthernet2/0/16
#
interface GigabitEthernet2/0/17
#
interface GigabitEthernet2/0/18
#
interface GigabitEthernet2/0/19
#
interface GigabitEthernet2/0/20
#
interface GigabitEthernet2/0/21
#
interface GigabitEthernet2/0/22
description ��FWSSL-VPN-FW-ASA-5508-G1/0/1
eth-trunk 1
#
interface GigabitEthernet2/0/23
eth-trunk 24
#
interface GigabitEthernet2/0/24
mad detect mode direct
#
interface XGigabitEthernet0/0/1
#
interface XGigabitEthernet0/0/2
#
interface XGigabitEthernet0/0/3
#
interface XGigabitEthernet0/0/4
#
interface XGigabitEthernet1/0/1
eth-trunk 4
#
interface XGigabitEthernet1/0/2
#
interface XGigabitEthernet1/0/3
#
interface XGigabitEthernet1/0/4
#
interface XGigabitEthernet2/0/1
eth-trunk 4
#
interface XGigabitEthernet2/0/2
#
interface XGigabitEthernet2/0/3
#
interface XGigabitEthernet2/0/4
#
interface NULL0
#
interface LoopBack0
description Management&Router ID
 ip address 10.173.95.2 255.255.255.255
#
bgp 65529
router-id 10.173.95.2
peer 10.173.0.22 as-number 65000
peer 10.173.0.34 as-number 65521
#
ipv4-family unicast
undo synchronization
network 10.173.0.0 255.255.0.0
network 10.174.0.0 255.255.0.0
network 10.175.0.0 255.255.0.0
import-route ospf 400
peer 10.173.0.22 enable
peer 10.173.0.22 ip-prefix CE-to-Local import
peer 10.173.0.22 ip-prefix Local-to-CE export
peer 10.173.0.34 enable
peer 10.173.0.34 ip-prefix Dmvpn_to_local import
peer 10.173.0.34 ip-prefix O-to-DMVPN export
#
ospf 400 router-id 10.173.95.2
import-route bgp
area 0.0.0.0
network 10.173.0.10 0.0.0.0
network 10.173.95.2 0.0.0.0
#
route-policy B-to-O permit node 1
if-match tag 65000
#
ip ip-prefix Local-to-CE index 10 permit 10.173.0.0 16
ip ip-prefix Local-to-CE index 20 permit 10.174.0.0 16
ip ip-prefix Local-to-CE index 30 permit 10.175.0.0 16
ip ip-prefix Dmvpn_to_local index 10 permit 10.2.16.0 24
ip ip-prefix Dmvpn_to_local index 20 permit 10.2.66.0 24
ip ip-prefix Dmvpn_to_local index 30 permit 172.30.50.0 24
ip ip-prefix Dmvpn_to_local index 40 permit 172.30.52.0 24
ip ip-prefix Dmvpn_to_local index 50 permit 10.12.200.0 24
ip ip-prefix Dmvpn_to_local index 60 permit 10.12.201.0 24
ip ip-prefix Dmvpn_to_local index 70 permit 10.102.96.0 24
ip ip-prefix Dmvpn_to_local index 80 permit 10.102.97.0 24
ip ip-prefix Dmvpn_to_local index 90 permit 10.32.34.0 24
ip ip-prefix Dmvpn_to_local index 100 permit 10.32.35.0 24
ip ip-prefix Dmvpn_to_local index 110 permit 172.19.192.0 24
ip ip-prefix Dmvpn_to_local index 120 permit 172.19.193.0 24
ip ip-prefix Dmvpn_to_local index 130 permit 172.30.44.0 24
ip ip-prefix Dmvpn_to_local index 140 permit 10.11.20.151 32
ip ip-prefix Dmvpn_to_local index 150 permit 10.11.20.152 32
ip ip-prefix Dmvpn_to_local index 160 permit 172.20.12.45 32
ip ip-prefix Dmvpn_to_local index 170 permit 172.20.22.200 32
ip ip-prefix Dmvpn_to_local index 180 permit 172.30.118.0 23
ip ip-prefix Dmvpn_to_local index 190 permit 172.30.117.128 25
ip ip-prefix Dmvpn_to_local index 200 permit 172.30.124.0 24
ip ip-prefix Dmvpn_to_local index 210 permit 172.30.125.0 24
ip ip-prefix Dmvpn_to_local index 220 permit 172.30.126.0 24
ip ip-prefix Dmvpn_to_local index 230 permit 172.30.117.0 29
ip ip-prefix Dmvpn_to_local index 240 permit 172.30.123.0 24
ip ip-prefix Dmvpn_to_local index 250 permit 172.20.22.201 32
ip ip-prefix Dmvpn_to_local index 260 permit 172.20.22.203 32
ip ip-prefix Dmvpn_to_local index 270 permit 172.20.22.205 32
ip ip-prefix Dmvpn_to_local index 280 permit 172.20.22.204 32
ip ip-prefix Dmvpn_to_local index 290 permit 172.20.22.202 32
ip ip-prefix Dmvpn_to_local index 300 permit 172.20.20.221 32
ip ip-prefix Dmvpn_to_local index 310 permit 172.22.8.0 21
ip ip-prefix Dmvpn_to_local index 320 permit 172.22.16.0 21
ip ip-prefix Dmvpn_to_local index 330 permit 192.168.2.22 32
ip ip-prefix Dmvpn_to_local index 340 permit 192.168.2.201 32
ip ip-prefix Dmvpn_to_local index 350 permit 10.53.16.0 20
ip ip-prefix Dmvpn_to_local index 360 permit 172.18.20.100 32
ip ip-prefix Dmvpn_to_local index 370 permit 172.18.20.117 32
ip ip-prefix Dmvpn_to_local index 380 permit 172.18.20.182 32
ip ip-prefix Dmvpn_to_local index 390 permit 172.18.20.183 32
ip ip-prefix Dmvpn_to_local index 400 permit 172.18.20.194 32
ip ip-prefix Dmvpn_to_local index 410 permit 172.18.20.195 32
ip ip-prefix Dmvpn_to_local index 420 permit 172.18.20.200 32
ip ip-prefix Dmvpn_to_local index 430 permit 172.18.20.208 32
ip ip-prefix Dmvpn_to_local index 440 permit 172.20.12.102 32
ip ip-prefix Dmvpn_to_local index 450 permit 172.20.12.103 32
ip ip-prefix Dmvpn_to_local index 460 permit 172.19.128.88 32
ip ip-prefix Dmvpn_to_local index 470 permit 172.19.128.109 32
ip ip-prefix Dmvpn_to_local index 480 permit 172.20.20.113 32
ip ip-prefix Dmvpn_to_local index 490 permit 172.20.22.52 32
ip ip-prefix Dmvpn_to_local index 500 permit 172.17.32.33 32
ip ip-prefix Dmvpn_to_local index 510 permit 172.17.32.167 32
ip ip-prefix Dmvpn_to_local index 520 permit 172.17.32.37 32
ip ip-prefix Dmvpn_to_local index 530 permit 172.17.31.121 32
ip ip-prefix Dmvpn_to_local index 540 permit 172.17.31.122 32
ip ip-prefix Dmvpn_to_local index 550 permit 172.17.31.123 32
ip ip-prefix Dmvpn_to_local index 560 permit 172.17.31.240 32
ip ip-prefix Dmvpn_to_local index 570 permit 172.17.31.246 32
ip ip-prefix Dmvpn_to_local index 580 permit 172.17.31.253 32
ip ip-prefix Dmvpn_to_local index 590 permit 172.17.31.250 32
ip ip-prefix Dmvpn_to_local index 600 permit 172.17.31.254 32
ip ip-prefix Dmvpn_to_local index 610 permit 172.17.90.251 32
ip ip-prefix Dmvpn_to_local index 620 permit 172.17.88.31 32
ip ip-prefix Dmvpn_to_local index 630 permit 172.17.17.201 32
ip ip-prefix Dmvpn_to_local index 640 permit 172.17.17.203 32
ip ip-prefix Dmvpn_to_local index 650 permit 10.33.20.244 32
ip ip-prefix Dmvpn_to_local index 660 permit 10.33.20.245 32
ip ip-prefix Dmvpn_to_local index 670 permit 10.33.20.246 32
ip ip-prefix Dmvpn_to_local index 680 permit 10.33.20.247 32
ip ip-prefix Dmvpn_to_local index 690 permit 10.33.20.249 32
ip ip-prefix Dmvpn_to_local index 700 permit 172.20.20.93 32
ip ip-prefix Dmvpn_to_local index 710 permit 172.19.10.253 32
ip ip-prefix Dmvpn_to_local index 720 permit 172.17.32.137 32
ip ip-prefix Dmvpn_to_local index 730 permit 10.102.3.51 32
ip ip-prefix Dmvpn_to_local index 740 permit 10.102.3.52 32
ip ip-prefix Dmvpn_to_local index 750 permit 10.102.3.53 32
ip ip-prefix Dmvpn_to_local index 760 permit 10.102.2.51 32
ip ip-prefix Dmvpn_to_local index 770 permit 10.102.2.54 32
ip ip-prefix Dmvpn_to_local index 780 permit 10.102.2.55 32
ip ip-prefix Dmvpn_to_local index 790 permit 10.102.2.56 32
ip ip-prefix Dmvpn_to_local index 800 permit 172.20.22.180 32
ip ip-prefix Dmvpn_to_local index 810 permit 10.33.23.0 24
ip ip-prefix Dmvpn_to_local index 820 permit 172.23.20.200 32
ip ip-prefix Dmvpn_to_local index 830 permit 172.20.20.92 32
ip ip-prefix Dmvpn_to_local index 840 permit 172.20.22.126 32
ip ip-prefix Dmvpn_to_local index 850 permit 172.23.20.201 32
ip ip-prefix Dmvpn_to_local index 860 permit 172.23.33.85 32
ip ip-prefix Dmvpn_to_local index 870 permit 10.54.0.0 16
ip ip-prefix Dmvpn_to_local index 880 permit 10.171.3.0 24
ip ip-prefix CE-to-Local index 10 deny 10.173.0.0 16
ip ip-prefix CE-to-Local index 20 deny 10.174.0.0 16
ip ip-prefix CE-to-Local index 300 permit 0.0.0.0 0 less-equal 32
ip ip-prefix O-to-DMVPN index 10 permit 10.173.3.0 24
#
ip route-static 10.1.1.0 255.255.255.0 10.173.0.34 description Merit-TW
ip route-static 10.1.1.177 255.255.255.255 10.173.0.34 description Merit-TW
ip route-static 10.2.16.50 255.255.255.255 10.173.0.34 description TPIDC_Mail
ip route-static 10.2.66.51 255.255.255.255 10.173.0.34 description TP_Mail
ip route-static 10.2.66.52 255.255.255.255 10.173.0.34 description TP_Mail
ip route-static 10.2.66.53 255.255.255.255 10.173.0.34 description TP_Mail
ip route-static 10.11.2.56 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.11.2.57 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.11.2.58 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.11.2.61 255.255.255.255 NULL0
ip route-static 10.11.2.61 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.12.16.64 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.12.16.68 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.13.15.19 255.255.255.255 10.173.0.34 description Dmvpn-router-
ntp-syn
ip route-static 10.32.11.53 255.255.255.255 10.173.0.34 description KS-PSN
ip route-static 10.33.22.0 255.255.255.0 10.173.0.34 description KS_Mail
ip route-static 10.33.22.96 255.255.255.224 10.173.0.34 description KS_Mail
ip route-static 10.33.22.99 255.255.255.255 10.173.0.34 description KS_Mail
ip route-static 10.33.22.101 255.255.255.255 10.173.0.34 description KS_Mail
ip route-static 10.33.22.102 255.255.255.255 10.173.0.34 description KS_Mail
ip route-static 10.33.22.107 255.255.255.255 10.173.0.34 description KS_Mail
ip route-static 10.33.22.108 255.255.255.255 10.173.0.34 description KS_Mail
ip route-static 10.33.23.0 255.255.255.0 10.173.0.34 description KS_Mail
ip route-static 10.41.3.11 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.41.3.12 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.41.3.21 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.41.3.22 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.41.3.23 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.41.3.24 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.42.222.63 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.42.222.65 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.42.222.66 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.42.222.67 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.42.222.163 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.42.222.165 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.42.222.166 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.42.222.167 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.53.2.0 255.255.255.0 10.173.0.34 description TW-MERRY
ip route-static 10.54.2.81 255.255.255.255 10.173.0.34 description JS_Mail
ip route-static 10.54.2.82 255.255.255.255 10.173.0.34 description JS_Mail
ip route-static 10.54.2.83 255.255.255.255 10.173.0.34 description JS_Mail
ip route-static 10.54.2.181 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.54.2.182 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.54.2.183 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.54.2.184 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.54.2.187 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.54.2.188 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.101.2.0 255.255.255.0 10.173.0.34 description Merit-TW
ip route-static 10.101.5.0 255.255.255.0 10.173.0.34 description Merit-TW
ip route-static 10.102.19.50 255.255.255.255 10.173.0.34 description JX_Email
ip route-static 10.102.19.51 255.255.255.255 10.173.0.34 description JX_Email
ip route-static 10.102.19.52 255.255.255.255 10.173.0.34 description JX_Email
ip route-static 10.102.20.50 255.255.255.255 10.173.0.34 description JX_Email
ip route-static 10.102.20.53 255.255.255.255 10.173.0.34 description JX_Email
ip route-static 10.102.20.54 255.255.255.255 10.173.0.34 description JX_Email
ip route-static 10.102.20.55 255.255.255.255 10.173.0.34 description JX_Email
ip route-static 10.102.20.56 255.255.255.255 10.173.0.34 description JX_Email
ip route-static 10.168.27.254 255.255.255.255 10.173.0.34 description YZ-C3
ip route-static 10.171.2.51 255.255.255.255 10.173.0.34 description YZ-VC
ip route-static 10.171.2.59 255.255.255.255 10.173.0.34 description YN2P-AD1
ip route-static 10.171.2.60 255.255.255.255 10.173.0.34 description YN2P-AD2
ip route-static 10.171.2.200 255.255.255.255 10.173.0.34 preference 200 description
YZ-ISE
ip route-static 10.171.2.201 255.255.255.255 10.173.0.34 preference 200 description
YZ-ISE
ip route-static 10.171.3.56 255.255.255.255 10.173.0.34 description YN2-MAIL
ip route-static 10.171.3.65 255.255.255.255 10.173.0.34 description YN2-SMG
ip route-static 10.173.0.0 255.255.0.0 NULL0
ip route-static 10.173.117.0 255.255.255.0 10.173.0.18 description SSL-VPN-POOL
ip route-static 10.177.3.99 255.255.255.255 NULL0
ip route-static 10.177.21.85 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.177.21.86 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.177.21.87 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.177.21.88 255.255.255.255 10.173.0.34 description MAIL
ip route-static 10.177.128.42 255.255.255.255 NULL0
ip route-static 45.249.212.0 255.255.255.0 10.173.0.22 description HUAWEI-APP
ip route-static 172.16.1.140 255.255.255.255 10.173.0.34 description Xuande-Mail
ip route-static 172.16.1.141 255.255.255.255 10.173.0.34 description MAIL
ip route-static 172.16.1.142 255.255.255.255 10.173.0.34 description MAIL
ip route-static 172.16.1.143 255.255.255.255 10.173.0.34 description Xuande-Mail
ip route-static 172.16.1.144 255.255.255.255 10.173.0.34 description MAIL
ip route-static 172.16.1.145 255.255.255.255 10.173.0.34 description MAIL
ip route-static 172.20.11.42 255.255.255.255 10.173.0.34 description DG-YAXIN
ip route-static 172.20.12.102 255.255.255.255 10.173.0.34 description DG_IPGUARD
ip route-static 172.20.20.92 255.255.255.255 10.173.0.34 description DG_AV-SERVER
ip route-static 172.20.20.94 255.255.255.255 10.173.0.34 description DG_Mail
ip route-static 172.20.22.53 255.255.255.255 10.173.0.34 description DG_Mail
ip route-static 172.20.22.56 255.255.255.255 10.173.0.34 description DG_Mail
ip route-static 172.20.22.57 255.255.255.255 10.173.0.34 description DG_Mail
ip route-static 172.20.22.205 255.255.255.255 10.173.0.34
ip route-static 172.20.22.216 255.255.255.255 10.173.0.34 description DG_Mail
ip route-static 172.20.22.217 255.255.255.255 10.173.0.34 description DG_Mail
ip route-static 172.23.20.200 255.255.255.255 10.173.0.34 description YN1-File-
Server
ip route-static 172.23.23.70 255.255.255.255 10.173.0.34 description VN1-NBU
ip route-static 172.23.220.77 255.255.255.255 NULL0
ip route-static vpn-instance default 0.0.0.0 0.0.0.0 10.173.94.254
#
snmp-agent
snmp-agent local-engineid 800007DB0330FD6546E750
snmp-agent community read cipher %^%#o|b@Ph~o8!ikZmVXqQZILTJNU&i0<'Nj3<Gs^"_.1FJ#X+
[W1$5SjNDw~A|PJhoS!!ZnZNvJUv3r[sH%%^%#
snmp-agent sys-info version v2c
undo snmp-agent sys-info version v3
snmp-agent mib-view excluded allextrmon rmon
snmp-agent inform timeout 5
snmp-agent inform resend-times 6
snmp-agent inform pending 7
#
stelnet server enable
ssh user sshadmin
ssh user sshadmin authentication-type password
ssh user sshadmin service-type stelnet
ssh server cipher aes256_ctr aes128_ctr
ssh server hmac sha2_256
ssh client cipher aes256_ctr aes128_ctr
ssh client hmac sha2_256
ssh server dh-exchange min-len 2048
#
telnet client-source -a 10.173.0.34
#
user-interface con 0
authentication-mode none
user-interface vty 0 4
authentication-mode aaa
user privilege level 15
protocol inbound all
user-interface vty 16 20
#
wlan
traffic-profile name default
security-profile name default
security-profile name default-wds
security-profile name default-mesh
ssid-profile name default
vap-profile name default
wds-profile name default
mesh-handover-profile name default
mesh-profile name default
regulatory-domain-profile name default
air-scan-profile name default
rrm-profile name default
radio-2g-profile name default
radio-5g-profile name default
wids-profile name default
ap-system-profile name default
port-link-profile name default
wired-port-profile name default
ap-group name default
provision-ap
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#
ops
#
return