研六3550

System software version : 2.41(9) Build Jul 17 2006 Rel

Building configuration...
Current configuration : 3905 bytes

!
version 1.0
!
hostname yan6she-sw3524-1
vlan 1
!
vlan 36
!
vlan 37
!
vlan 38
!
vlan 39
!
vlan 40
!
vlan 126
!
ip access-list extended pro
  deny tcp any  any eq 135
  deny tcp any  any eq 136
  deny tcp any  any eq 137
  deny tcp any  any eq 139
  deny tcp any  any eq 445
  deny tcp any  any eq 4444
  deny tcp any  any eq 5554
  deny tcp any  any eq 1068
  deny udp any  any eq 135
  deny udp any  any eq 136
  deny udp any  any eq netbios-ns
  deny udp any  any eq netbios-dgm
  deny udp any  any eq netbios-ss
  deny udp any  any eq 445
  deny udp any  any eq 5554
  deny udp any  any eq 1068
  permit ip any  any
!
radius-server host 202.197.120.3
aaa authentication dot1x
aaa accounting server 202.197.120.3
aaa accounting
aaa accounting update
enable secret level 1 5 'QlowNq&]W`@IOrJQUmLMp]K^2nAxB^"
enable secret level 15 5 /Q`3t{bc]W^_7zygQUUV-aeh^254'dfi
!
service dhcp
ip helper-address 202.197.120.20
  spanning-tree mode rstp
  spanning-tree
interface FastEthernet 0/1
 switchport mode trunk
!
interface FastEthernet 0/2
 switchport access vlan 39
 dot1x port-control auto
!
interface FastEthernet 0/3
 switchport access vlan 39
 dot1x port-control auto
!
interface FastEthernet 0/4
 switchport access vlan 39
 dot1x port-control auto
!
interface FastEthernet 0/5
 switchport access vlan 39
 dot1x port-control auto
!
interface FastEthernet 0/6
 switchport access vlan 39
 dot1x port-control auto
!
interface FastEthernet 0/7
 switchport access vlan 39
 dot1x port-control auto
!
interface FastEthernet 0/8
 switchport access vlan 39
 dot1x port-control auto
!
interface FastEthernet 0/9
 switchport access vlan 39
 dot1x port-control auto
!
interface FastEthernet 0/10
 switchport access vlan 39
 dot1x port-control auto
!
interface FastEthernet 0/11
 switchport access vlan 40
 dot1x port-control auto
!
interface FastEthernet 0/12
 switchport access vlan 40
 dot1x port-control auto
!
interface FastEthernet 0/13
 switchport access vlan 37
 dot1x port-control auto
!
interface FastEthernet 0/14
 switchport access vlan 40
 dot1x port-control auto
!
interface FastEthernet 0/15
 switchport access vlan 37
 dot1x port-control auto
!
interface FastEthernet 0/16
 switchport access vlan 37
 dot1x port-control auto
!
interface FastEthernet 0/17
 switchport access vlan 37
 dot1x port-control auto
!
interface FastEthernet 0/18
 switchport access vlan 37
 dot1x port-control auto
!
interface FastEthernet 0/19
 switchport access vlan 39
 dot1x port-control auto
!
interface FastEthernet 0/20
 switchport access vlan 40
 dot1x port-control auto
!
interface FastEthernet 0/21
 switchport access vlan 40
 dot1x port-control auto
!
interface FastEthernet 0/22
 switchport mode trunk
!
interface FastEthernet 0/23
 switchport mode trunk
!
interface FastEthernet 0/24
 switchport mode trunk
!
interface Vlan 1
 ip address 1.1.1.1 255.255.255.0
!
interface Vlan 36
 ip address 172.16.136.254 255.255.255.0
!
interface Vlan 37
 ip address 172.16.137.254 255.255.255.0
!
interface Vlan 38
 ip address 172.16.138.254 255.255.255.0
!
interface Vlan 39
 ip address 172.16.139.254 255.255.255.0
!
interface Vlan 40
 ip address 172.16.140.254 255.255.255.0
!
interface Vlan 126
 ip address 192.168.126.2 255.255.255.252
!
interface Vlan 400
 ip address 192.168.8.241 255.255.255.248
!
interface Vlan 3777
 ip address 192.168.254.31 255.255.255.0
!
dot1x client-probe enable
aaa authorization ip-auth-mode supplicant
dot1x timeout quiet-period 0
dot1x timeout tx-period 2
dot1x timeout supp-timeout 3
no dot1x re-authentication
radius-server key hnsd2004
ip route 0.0.0.0 0.0.0.0 Vlan 3777 192.168.254.254 1 enabled
snmp-server community hnsd_2004 rw
end