config-file-header
Switch-WiFi
v1.3.5.58 / R750_NIK_1_35_647_358
CLI v1.0
set system mode switch 

file SSD indicator excluded
@
vlan database
vlan 2,20-254,400-401,450-453,499 
exit
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
dot1x system-auth-control
hostname Switch-WiFi
!
!
management access-list SSH_access
permit ip-source 10.0.2.0 mask 255.255.255.0 service ssh 
permit ip-source 10.0.2.0 mask 255.255.255.0 service http 
permit ip-source 10.0.2.0 mask 255.255.255.0 service https 
deny 
exit
management access-class SSH_access
username xxxxxxxxxxxx password encrypted aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa privilege 15
username yyyyyyyyyyyy password encrypted bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb privilege 15
ip ssh server
ip domain name hk.service
!
interface vlan 2
 name vlan-service 
 ip address 10.0.2.61 255.255.255.0 
 no ip address dhcp 
!
interface vlan 20
 name vlan-suz-reception
!
interface vlan 21
 name vlan-suz-office
!
interface vlan 22
 name vlan-suz-education
!
interface vlan 23
 name vlan-suz-commercial
!

............ shortened ........

!
interface vlan 450
 name vlan-user-guest
!
interface vlan 451
 name vlan-user-inactive
!
interface vlan 452
 name vlan-user-banned 
!
interface vlan 453
 name vlan-user-unknown-device 
!
interface vlan 499
 name vlan-wan 
!
interface gigabitethernet1
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet2
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet3
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet4
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet5
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet6
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet7
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet8
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet9
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet10
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet11
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet12
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet13
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet14
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet15
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet16
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet17
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet18
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet19
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet20
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet21
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet22
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet23
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet24
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet25
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet26
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet27
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet28
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet29
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet30
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet31
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet32
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet33
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet34
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet35
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet36
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet37
 dot1x guest-vlan enable 
 dot1x max-req 3 
 dot1x reauthentication 
 dot1x timeout quiet-period 10 
 dot1x timeout reauth-period 1800 
 dot1x authentication 802.1x mac 
 dot1x radius-attributes vlan static 
 dot1x port-control auto 
 switchport mode access 
!
interface gigabitethernet38
 dot1x guest-vlan enable 
 dot1x max-req 3 
 dot1x reauthentication 
 dot1x timeout quiet-period 10 
 dot1x timeout reauth-period 1800 
 dot1x authentication 802.1x mac 
 dot1x radius-attributes vlan static 
 dot1x port-control auto 
 switchport mode access 
!
interface gigabitethernet39
 dot1x guest-vlan enable 
 dot1x max-req 3 
 dot1x reauthentication 
 dot1x timeout quiet-period 10 
 dot1x timeout reauth-period 1800 
 dot1x authentication 802.1x mac 
 dot1x radius-attributes vlan static 
 dot1x port-control auto 
 switchport mode access 
!
interface gigabitethernet40
 dot1x guest-vlan enable 
 dot1x max-req 3 
 dot1x reauthentication 
 dot1x timeout quiet-period 10 
 dot1x timeout reauth-period 1800 
 dot1x authentication 802.1x mac 
 dot1x radius-attributes vlan static 
 dot1x port-control auto 
 switchport mode access 
!
interface gigabitethernet41
 dot1x guest-vlan enable 
 dot1x max-req 3 
 dot1x reauthentication 
 dot1x timeout quiet-period 10 
 dot1x timeout reauth-period 1800 
 dot1x authentication 802.1x mac 
 dot1x radius-attributes vlan static 
 dot1x port-control auto 
 switchport mode access 
!
interface gigabitethernet42
 dot1x guest-vlan enable 
 dot1x max-req 3 
 dot1x reauthentication 
 dot1x timeout quiet-period 10 
 dot1x timeout reauth-period 1800 
 dot1x authentication 802.1x mac 
 dot1x radius-attributes vlan static 
 dot1x port-control auto 
 switchport mode access 
!
interface gigabitethernet43
 dot1x guest-vlan enable 
 dot1x max-req 3 
 dot1x reauthentication 
 dot1x timeout quiet-period 10 
 dot1x timeout reauth-period 1800 
 dot1x authentication 802.1x mac 
 dot1x radius-attributes vlan static 
 dot1x port-control auto 
 switchport mode access 
!
interface gigabitethernet44
 dot1x guest-vlan enable 
 dot1x max-req 3 
 dot1x reauthentication 
 dot1x timeout quiet-period 10 
 dot1x timeout reauth-period 1800 
 dot1x authentication 802.1x mac 
 dot1x radius-attributes vlan static 
 dot1x port-control auto 
 switchport mode access 
!
interface gigabitethernet45
 dot1x guest-vlan enable 
 dot1x max-req 3 
 dot1x reauthentication 
 dot1x timeout quiet-period 10 
 dot1x timeout reauth-period 1800 
 dot1x authentication 802.1x mac 
 dot1x radius-attributes vlan static 
 dot1x port-control auto 
 switchport mode access 
!
interface gigabitethernet46
 dot1x guest-vlan enable 
 dot1x max-req 3 
 dot1x reauthentication 
 dot1x timeout quiet-period 10 
 dot1x timeout reauth-period 1800 
 dot1x authentication 802.1x mac 
 dot1x radius-attributes vlan static 
 dot1x port-control auto 
 switchport mode access 
!
interface gigabitethernet47
 dot1x guest-vlan enable 
 dot1x max-req 3 
 dot1x reauthentication 
 dot1x timeout quiet-period 10 
 dot1x timeout reauth-period 1800 
 dot1x authentication 802.1x mac 
 dot1x radius-attributes vlan static 
 dot1x port-control auto 
 switchport mode access 
!
interface gigabitethernet48
 dot1x guest-vlan enable 
 dot1x max-req 3 
 dot1x reauthentication 
 dot1x timeout quiet-period 10 
 dot1x timeout reauth-period 1800 
 dot1x authentication 802.1x mac 
 dot1x radius-attributes vlan static 
 dot1x port-control auto 
 switchport mode access 
!
interface gigabitethernet49
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet50
 switchport trunk allowed vlan add 2,20-254,400-401,450-453,499 
!
interface gigabitethernet51
 switchport mode access 
 switchport access vlan 2 
!
interface gigabitethernet52
 switchport mode access 
 switchport access vlan 2 
!
exit
ip default-gateway 10.0.2.1