conf
hostname SW-169_123456
ip default-gateway 10.11.12.1
vlan 1
no ip address
exit
vlan 36
name DEAD-VLAN
no ip address
untag all
exit
vlan 35
name MGMT
ip address 10.11.12.21 255.255.255.0
exit
#DNS
ip dns server-address priority 1 8.8.8.8
ip dns server-address priority 2 8.8.4.4
#SSH
crypto key generate ssh
crypto key generate
ip ssh
aaa authentication ssh enable local
#Logging
logging 172.16.8.241
logging facility local1
#SNMP setting
snmp-server community cru3sl1 operator unrestricted
snmp-server community b@mb1x manager unrestricted
snmp-server contact SHS
snmp-server location 123456
no snmp-server community “public”
#LOOP PROTECTION
loop-protect all
loop-protect disable-timer 60
# HP FAULT FINDER
fault-finder all
###STP NON ROOT CONFIG —→»> WARNING ADAPT THE PORT RANGE!
#spanning-tree
#spanning-tree force-version rstp
#spanning-tree trap errant-bpdu
#spanning-tree config-name “STP”
#spanning-tree config-revision 1
#spanning-tree 1-24 bpdu-protection
#spanning-tree 1-24 admin-edge-port
#spanning-tree 1-24 bpdu-filter
#spanning-tree bpdu-protection-timeout 60
###
#SNTP setting
sntp unicast
sntp 720
sntp server priority 1 172.16.8.225
sntp server priority 2 172.16.16.225
sntp server 172.16.8.225
sntp server 172.16.16.225
timesync sntp
#Password setting
password manager user-name admin
password
password
password operator
password
password
#LACP
interface all
no lacp
exit
#HP AAA (Radius/LDAP)
aaa authentication login privilege-mode
aaa authentication telnet login radius local
aaa authentication telnet enable radius local
aaa authentication ssh login radius local
aaa authentication ssh enable radius local
aaa authentication web login radius local
aaa authentication web enable radius local
aaa accounting update periodic 1
aaa accounting network start-stop radius
aaa accounting exec start-stop radius
aaa accounting system start-stop radius
aaa accounting commands stop-only radius
radius-server retransmit 5
radius-server key Sp7xyDrk
radius-server host 172.16.8.102 key Sp7xyDrk
####ATTENTION THIS PART REQUIRES CUSTOMIZATION FOR EACH SWITCH
#dhcp-snooping
#dhcp-snooping trust #UPLINK-PORTS-INCLUDING-FUSION-LAN
#no dhcp-snooping option 82
#dhcp-snooping vlan #MANAGEMENT-VLAN-(35?)
####
wr mem
exit
wr m
wr mem