# Huawei Versatile Routing Platform Software

# VRP (R) software, Version 5.170 (S5720 V200R010C00SPC600)

# Copyright (C) 2000-2016 HUAWEI TECH CO., LTD
#
# DDR Memory Size : 512 M bytes
# FLASH Memory Size : 238 M bytes
# Pcb Version : VER.C
# BootROM Version : 020a.0001
# BootLoad Version : 020a.0001
# CPLD Version : 0106
# Software Version : VRP (R) Software, Version 5.170 (V200R010C00SPC600)
# S5720-28X-LI-24S-AC's Device status:
# Slot Sub Type Online Power Register Status Role
# -------------------------------------------------------------------------------
# 0 - S5720-28X-LI-24S Present PowerOn Registered Normal Master
!Software Version V200R010C00SPC600
#
sysname S5720-TMC-POLDA-JAYA
#
info-center loghost 10.70.100.253 facility local6
info-center console channel 2
#
vlan batch 55 880 1592 1768 1780 1922 2007 3954
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name portal_authen_profile
authentication-profile name dot1xmac_authen_profile
authentication-profile name multi_authen_profile
#
undo http server enable
undo http secure-server enable
#
clock timezone WIB add 07:00:00
#
radius-server template default
#
hwtacacs-server template mti
hwtacacs-server authentication 10.70.100.100
hwtacacs-server authentication 10.70.100.200 secondary
hwtacacs-server authorization 10.70.100.100
hwtacacs-server authorization 10.70.100.200 secondary
hwtacacs-server accounting 10.70.100.100
hwtacacs-server accounting 10.70.100.200 secondary
hwtacacs-server source-ip 10.55.11.21
hwtacacs-server shared-key cipher %^%#EMuf6`{4793I.0#(r:<*1Y.v5UtCx.,FU=*lO++<%^%#
hwtacacs-server timer response-timeout 3
undo hwtacacs-server user-name domain-included
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
vlan 55
description vlan-MGMT
vlan 880
description METRO-DITLANTAS
vlan 1592
 description INET-DITLANTAS
vlan 1768
description LL-CCTV-TMC-POLDA
vlan 1780
description DITLANTAS-POLDA-METRO-1780
vlan 1922
description METRO-DITLANTAS
vlan 2007
description JASA-MARGA-SO30883
vlan 3954
description BOD-DITLANTAS-POLDA-METRO-JAYA
#
aaa
authentication-scheme default
authentication-scheme radius
authentication-mode radius
authentication-scheme mti
authentication-mode hwtacacs local
authorization-scheme default
authorization-scheme mti
authorization-mode hwtacacs local
authorization-cmd 15 hwtacacs local
accounting-scheme default
accounting-scheme mti
accounting-mode hwtacacs
accounting start-fail online
local-aaa-user password policy administrator
password expire 0
domain default
authentication-scheme mti
accounting-scheme mti
authorization-scheme mti
radius-server default
hwtacacs-server mti
domain default_admin
authentication-scheme mti
accounting-scheme mti
authorization-scheme mti
hwtacacs-server mti
local-user admin password irreversible-cipher $1a$,$a`,ke-)@$>}7f7D<hTLhn:$+
+g&SNS+6H%"LdA(8j,~6yUfsA$
local-user admin privilege level 15
local-user admin service-type terminal http
local-user pioneer-venus password irreversible-cipher $1a$1^\~X=\y+;$e~W/)elq,"XY|
QP4D#XL+f$eA<1wR,r!U3>(x!EZ$
local-user pioneer-venus privilege level 15
local-user pioneer-venus service-type telnet terminal ssh
local-user mars_pathfinder password irreversible-cipher $1a$C4ZL~DYd*$
$l_0V>YSl(2#=i+VoRs<TjD6rMbv"'0{.>W0Ygjg7$
local-user mars_pathfinder privilege level 15
local-user mars_pathfinder service-type telnet terminal ssh
local-user orbiter_mission password irreversible-cipher
$1a$a10k/9H0KA$Vk~8*E1za@&Z]a#Bw[+!M\L6C;}AXM~Ft(,=p|aC$
local-user orbiter_mission privilege level 15
local-user orbiter_mission service-type telnet terminal ssh
#
ntp-service server disable
ntp-service ipv6 server disable
ntp-service unicast-server 10.101.110.111
#
interface Vlanif1
shutdown
#
interface Vlanif55
ip address 10.55.11.21 255.255.255.192
#
interface Vlanif1768
ip address 192.168.175.1 255.255.255.248
#
interface Vlanif1780
#
interface Vlanif2007
ip address 192.168.24.3 255.255.255.248
#
interface Vlanif3954
ip address 192.168.48.5 255.255.255.248
#
interface GigabitEthernet0/0/1
description To-SW-OUT-RSCM-POLDA-11.22-P.17
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 55 1922
#
interface GigabitEthernet0/0/2
description To-SW-OUT-RSCM-KEMENPAN-11.23-P.17
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 55 1922
#
interface GigabitEthernet0/0/3
description TO-LAN-TMC-Metro-GTO-Semanggi-CID:2883940300051039
port link-type trunk
port trunk allow-pass vlan 55 1922
qos lr outbound cir 30720 cbs 3840000
qos lr inbound cir 30720 cbs 3840000
#
interface GigabitEthernet0/0/4
description TO-SW-OUTDOOR-SIMPANG-FOURSEASON
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 55 1780 3954
stp disable
qos lr outbound cir 110000 cbs 13750000
qos lr inbound cir 110000 cbs 13750000
#
interface GigabitEthernet0/0/5
description TO-SW-OUTDOOR-DEPAN-HALTE-TIMAH
#
interface GigabitEthernet0/0/6
#
interface GigabitEthernet0/0/7
#
interface GigabitEthernet0/0/8
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
#
interface GigabitEthernet0/0/13
#
interface GigabitEthernet0/0/14
description BOD-DITLANTAS
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 55 1780
stp disable
#
interface GigabitEthernet0/0/15
#
interface GigabitEthernet0/0/16
#
interface GigabitEthernet0/0/17
description TMC-POLDA-INET-CID-2866060100047622
port link-type access
port default vlan 1592
#
interface GigabitEthernet0/0/18
description TO-LAN-TMC-Metro-GTO-SEMANGGI-CID2883940300051039
port link-type access
port default vlan 1922
qos lr outbound cir 901120 cbs 112640000
qos lr inbound cir 901120 cbs 112640000
#
interface GigabitEthernet0/0/19
description to-LAN-TMC-Metro-vlan880
port link-type access
port default vlan 880
stp disable
qos lr outbound cir 163840 cbs 20480000
qos lr inbound cir 163840 cbs 20480000
#
interface GigabitEthernet0/0/20
description LL-DITLANTAS-GEDUNGBIRU-JASAMARGA-CID2883941300050808
port link-type access
port default vlan 2007
stp disable
#
interface GigabitEthernet0/0/21
description TMC-POLDA-INET-CID-2866060100047622
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 55 1592
#
interface GigabitEthernet0/0/22
description BOD-TMC-POLDA-30MBPS
port link-type access
port default vlan 3954
qos lr outbound cir 30720 cbs 3840000
qos lr inbound cir 30720 cbs 3840000
#
interface GigabitEthernet0/0/23
description TES_CCTV-1768
port link-type access
 port default vlan 1768
#
interface GigabitEthernet0/0/24
description CONSOLE-UTP
port link-type access
port default vlan 55
#
interface XGigabitEthernet0/0/1
description To-ZXR10-BMP-11.2-P.xge0/1/132
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 55 880 1592 1768 1780 1922 2007
stp disable
jumboframe enable 10240
#
interface XGigabitEthernet0/0/2
description TO-CE-DITLANTAS-POLDA
port link-type access
port default vlan 1768
#
interface XGigabitEthernet0/0/3
#
interface XGigabitEthernet0/0/4
#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 10.55.11.1
#
snmp-agent
snmp-agent local-engineid 800007DB03AC751D235F00
snmp-agent community read cipher %^%#Ch:4P>fT)AH>1`(;He\!
$J89<GHwk&g{P@*d2&zOUU;D@mls5PgF#$/gm6GC~"(G/>EO4PhNgLEKcTfA%^%#
snmp-agent sys-info contact noc.prov@moratelindo.co.id
snmp-agent sys-info location TMC-POLDA
snmp-agent sys-info version all
#
stelnet server enable
ssh authentication-type default password
#
header login information "TACACS-ized, please add '@default' after username"
#
user-interface con 0
authentication-mode password
set authentication password cipher $1a$ar|
12<g\y=$Kfx3H)F<c>V3Z3%Mi*i+mT@W:CI6gEo+}U#l\Y\'$
user-interface vty 0 4
authentication-mode aaa
user privilege level 15
user-interface vty 16 20
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#
return