# Huawei Versatile Routing Platform Software
# VRP (R) software, Version 5.170 (S5720 V200R010C00SPC600)
# Copyright (C) 2000-2016 HUAWEI TECH CO., LTD
# 
# DDR    Memory Size      : 512        M bytes
# FLASH  Memory Size      : 238        M bytes
# Pcb           Version   : VER.B
# BootROM       Version   : 020a.0001
# BootLoad      Version   : 020a.0001
# CPLD          Version   : 0106 
# Software      Version   : VRP (R) Software, Version 5.170 (V200R010C00SPC600)
# S5720-52X-LI-AC's Device status:
# Slot Sub  Type                  Online    Power    Register     Status   Role  
# -------------------------------------------------------------------------------
# 0    -    S5720-52X-LI          Present   PowerOn  Registered   Normal   Master
!Software Version V200R010C00SPC600
#
sysname PR-CAETANO-MENDES-A001-BKB-001
#
vlan batch 12 17 99 151 633 894 to 896 1300 1306 1321 1520
vlan batch 2992 to 2993 3115 to 3117
#
stp disable
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name portal_authen_profile
authentication-profile name dot1xmac_authen_profile
authentication-profile name multi_authen_profile
#
set save-configuration interval 1440 delay 30
#
telnet server enable
#
lldp enable
#
clock timezone BRA minus 03:00:00
#
vlan statistics by-bytes
#
radius-server template default
#
ecc peer-public-key 172.16.30.19 encoding-type der
 public-key-code begin
    04FE5536 1C11E883 ADB095C6 067F0403 6CB64F1E DD491927 78E9D895 49FFAB91
    C4DBD604 03A2D0E3 340B7C20 2CA6DA8F 6697ACE7 958183D5 52028BFF 6D5D21E3
    7D
 public-key-code end
peer-public-key end
#
ecc peer-public-key 172.16.20.129 encoding-type der
 public-key-code begin
    04FE5536 1C11E883 ADB095C6 067F0403 6CB64F1E DD491927 78E9D895 49FFAB91
    C4DBD604 03A2D0E3 340B7C20 2CA6DA8F 6697ACE7 958183D5 52028BFF 6D5D21E3
    7D
 public-key-code end
peer-public-key end
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
vlan 12
 description Gerencia Switch: MG Fibra
 statistic enable
vlan 17
 description QINQ_OLT_CAETANO
 statistic enable
vlan 151
 description Transporte: MG Fibra: Imbau
vlan 633
 description TRASNPORTE: ALT_PRF LIGADO NA 9:3 OLT
vlan 894
 description Transporte: Dbug: Campos Gerais Caetano<>Tibagi
vlan 895
 description Transporte: Dbug: Campos Gerais Caetano<>Tibagi
vlan 896
 description Transporte: Dbug: Campos Gerais Caetano<>Tibagi
vlan 1520
 description "Cliente MG-Transporte PRF"
 statistic enable
vlan 2992
 description Cliente Dbug: WiFi Connect: Telemaco
 statistic enable
vlan 2993
 description Cliente Dbug: Ecology Telecom
 statistic enable
vlan 3115
 description p2p-PR-IMBAU
 statistic enable
vlan 3116
 description p2p-PR-ALTO_AMPAR-IMBAU
vlan 3117
 description p2p-PR-ALTO_AMPARO
#
aaa
 authentication-scheme default
 authentication-scheme radius
  authentication-mode radius
 authorization-scheme default
 accounting-scheme default
 local-aaa-user password policy administrator 
  undo password alert original 
  password expire 0
 domain default
  authentication-scheme radius
  radius-server default
 domain default_admin
  authentication-scheme default
 local-user admin password irreversible-cipher $1a$9^E02m1J'<$UUnu1$:pW*5vXC>Z5jL:@nI$3@s/B-|'[>8*`eBJ$
 local-user admin privilege level 15
 local-user admin service-type telnet terminal ssh
 local-user onnet:onnet password irreversible-cipher $1a$!qc+:|tK$R$a9<V"oh\h*Zt@^(!h|nR|xRz=|IR'.}E+PV/"%|Y$
 local-user onnet:onnet privilege level 15
 local-user onnet:onnet service-type telnet terminal ssh
 local-user onnet:onnet expire-date 2099/12/31
 local-user backup@onnet password irreversible-cipher $1a$zF}%"L{(fB$@oq%&dQ(`Yd!t}.dM/;>N|q+Qk>o[&@rBrWffrD)$
 local-user backup@onnet privilege level 15
 local-user backup@onnet service-type ssh
 local-user tecnico:onnet password irreversible-cipher $1a$_Ms#BAMJnP$q0(9Zv(Cf4g=w>6$|}w6Yu/"5,yXsEIP13+,'+$Y$
 local-user tecnico:onnet privilege level 1
 local-user tecnico:onnet service-type telnet terminal ssh
#
interface Vlanif1
#
interface Vlanif12
#
interface Vlanif99
 ip address 10.10.200.101 255.255.255.252
#
interface Vlanif151
#
interface Vlanif633
 description TRASNPORTE: ALT_PRF LIGADO NA 9:3 OLT
#
interface Vlanif3115
 description UPLINK: PR-IMBAU-A001-BKB
 ip address 172.16.20.130 255.255.255.252
#
interface Vlanif3117
 description UPLINK: PR-ALTO-AMPARO-A001-BKB
 ip address 172.16.20.137 255.255.255.252
#
interface GigabitEthernet0/0/1
 description UPLINK: RADIO_NAZARENO
 port link-type trunk
 port trunk allow-pass vlan 1300
#
interface GigabitEthernet0/0/2
 description Cliente Dbug: WiFi Connect
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 2992
 qos lr outbound cir 500000 cbs 62500000
 qos lr inbound cir 500000 cbs 62500000
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
#
interface GigabitEthernet0/0/6
#
interface GigabitEthernet0/0/7
#
interface GigabitEthernet0/0/8
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
#
interface GigabitEthernet0/0/13
#
interface GigabitEthernet0/0/14
#
interface GigabitEthernet0/0/15
#
interface GigabitEthernet0/0/16
#
interface GigabitEthernet0/0/17
#
interface GigabitEthernet0/0/18
#
interface GigabitEthernet0/0/19
#
interface GigabitEthernet0/0/20
#
interface GigabitEthernet0/0/21
#
interface GigabitEthernet0/0/22
#
interface GigabitEthernet0/0/23
#
interface GigabitEthernet0/0/24
#
interface GigabitEthernet0/0/25
#
interface GigabitEthernet0/0/26
#
interface GigabitEthernet0/0/27
#
interface GigabitEthernet0/0/28
#
interface GigabitEthernet0/0/29
#
interface GigabitEthernet0/0/30
#
interface GigabitEthernet0/0/31
#
interface GigabitEthernet0/0/32
#
interface GigabitEthernet0/0/33
#
interface GigabitEthernet0/0/34
#
interface GigabitEthernet0/0/35
#
interface GigabitEthernet0/0/36
#
interface GigabitEthernet0/0/37
#
interface GigabitEthernet0/0/38
#
interface GigabitEthernet0/0/39
#
interface GigabitEthernet0/0/40
#
interface GigabitEthernet0/0/41
#
interface GigabitEthernet0/0/42
#
interface GigabitEthernet0/0/43
#
interface GigabitEthernet0/0/44
#
interface GigabitEthernet0/0/45
#
interface GigabitEthernet0/0/46
#
interface GigabitEthernet0/0/47
#
interface GigabitEthernet0/0/48
#
interface XGigabitEthernet0/0/1
 description UPLINK: PR-IMBAU-A001-BKB: 1/1/7
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 12 17 894 to 896 2992 to 2993 3115 to 3116
#
interface XGigabitEthernet0/0/2
 description Cliente Dbug: Campos Gerais
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 894 to 896
#
interface XGigabitEthernet0/0/3
 description UPLINK: OLT_FIBERHOME P: 9:1
 port link-type hybrid
 qinq vlan-translation enable
 port hybrid pvid vlan 17
 port hybrid tagged vlan 633 1321 1520
 port hybrid untagged vlan 17
 port vlan-stacking vlan 99 stack-vlan 17
 port vlan-stacking vlan 1000 to 1008 stack-vlan 17
#
interface XGigabitEthernet0/0/4
 description UPLINK: PR-ALTO-AMPARO-BKB: 1/1/1
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 17 132 151 633 894 to 896 1300 1306 1321 1520 3116 to 3117
#
interface NULL0
#
interface LoopBack0
 ip address 172.16.30.30 255.255.255.255
#
ip route-static 0.0.0.0 0.0.0.0 172.16.20.129
ip route-static 0.0.0.0 0.0.0.0 172.16.20.138 preference 80
#
snmp-agent
snmp-agent local-engineid 800007DB0380B575D47640
snmp-agent community read cipher %^%#o*cB'7ueH>}{J@"ZRg-4#UTL7EIsuQFV81'}uHM={g$<!}@~*Air@M3[Ir9ZpRurDL$qq<:FTA<V=ngK%^%#
snmp-agent sys-info location Caetano Mendes,PR
snmp-agent sys-info version v2c v3
snmp-agent protocol source-interface LoopBack0
#
stelnet server enable
ssh user admin
ssh user admin authentication-type password
ssh user admin service-type all
ssh user backup@onnet
ssh user backup@onnet authentication-type password
ssh user backup@onnet service-type stelnet
ssh client first-time enable
ssh client 172.16.20.129 assign ecc-key 172.16.20.129
ssh client 172.16.30.19 assign ecc-key 172.16.30.19
ssh server cipher aes256_ctr aes128_ctr
ssh server hmac sha2_256
ssh client cipher aes256_ctr aes128_ctr
ssh client hmac sha2_256
ssh server dh-exchange min-len 2048
#
user-interface con 0
 authentication-mode aaa
user-interface vty 0 4
 authentication-mode aaa
 protocol inbound all
user-interface vty 16 20
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#
return