<N606FW>dis cu
version 5.20, Release 3721P06
sysname N606FW
l2tp enable
undo voice vlan mac-address 00e0-bb00-0001
domain default enable system
ipv6
telnet server enable
undo ip http port 8888
undo alg dns
undo alg rtsp
undo alg h323
undo alg sip
undo alg sqlnet
undo alg pptp
undo alg ils
undo alg nbt
undo alg msn
undo alg qq
undo alg tftp
undo alg sccp
undo alg gtp
inline-interfaces 1
acl number 2000 rule 0 permit source 192.168.16.131 0 rule 1 permit source 192.168.16.132 0 rule 2 permit source 192.168.16.133 0 rule 3 permit source 192.168.16.134 0 rule 4 permit source 192.168.16.135 0 rule 5 permit source 192.168.16.136 0 rule 6 permit source 192.168.16.137 0 rule 7 permit source 192.168.16.138 0 rule 8 permit source 192.168.16.139 0 rule 9 permit source 192.168.16.140 0 rule 10 permit source 192.168.16.141 0 rule 11 permit source 192.168.16.142 0 rule 12 permit source 192.168.16.143 0 rule 13 permit source 192.168.16.144 0 rule 14 permit source 192.168.16.145 0 rule 15 permit source 192.168.16.146 0 rule 16 permit source 192.168.16.162 0 rule 17 permit source 192.168.16.11 0 acl number 2001 rule 0 permit source 192.168.100.0 0.0.0.255 rule 1 deny
acl number 3333 rule 0 permit ip source 192.168.0.250 0
vlan 1
vlan 502
vlan 600 to 601
vlan 801 description 录播
vlan 805 description guanli
domain system authentication ppp local access-limit disable state active idle-cut disable self-service-url disable ip pool 1 192.168.100.131 192.168.100.145
pki domain default crl check disable
user-group system group-attribute allow-guest
local-user admin password cipher $c$3$V66rDBQOusX12iu+1NhZFWrpKXKBQz1YVOLA0ONYZaZME/94= authorization-attribute level 3 service-type ssh telnet service-type web local-user nic password cipher $c$3$+J2PnuZQlX4//QJe4c/HbvBxGFFihUhLQKA+UF6EcNc8= service-type ppp
ssl server-policy default pki-domain default ssl server-policy access-policy pki-domain default
l2tp-group 1 undo tunnel authentication allow l2tp virtual-template 0 tunnel name nic
interface Virtual-Template0 ppp authentication-mode chap domain system remote address pool 1 ip address 192.168.100.254 255.255.255.128
interface NULL0
interface Vlan-interface1 nat outbound 2000 ip address 192.168.100.11 255.255.255.128
interface Vlan-interface601
interface Vlan-interface805 description guanli shutdown ip address 192.168.252.10 255.255.255.252
interface GigabitEthernet0/0 port link-mode route ip address 192.168.0.1 255.255.255.0
interface GigabitEthernet0/1 port link-mode route
interface GigabitEthernet0/5 port link-mode route
interface GigabitEthernet0/6 port link-mode route
interface GigabitEthernet0/7 port link-mode route
interface GigabitEthernet0/8 port link-mode route
interface GigabitEthernet0/9 port link-mode route
interface GigabitEthernet0/10 port link-mode route
interface GigabitEthernet0/11 port link-mode route
interface GigabitEthernet0/2 port link-mode bridge port link-type trunk port trunk permit vlan 1 502 600 to 601 801 805 combo enable fiber speed 1000 duplex full port inline-interfaces 1
interface GigabitEthernet0/3 port link-mode bridge port link-type trunk port trunk permit vlan 1 600 to 601 801 speed 1000 duplex full port inline-interfaces 1
interface GigabitEthernet0/4 port link-mode bridge description 8080 port link-type trunk port trunk permit vlan 1 502 600 to 601 805 combo enable fiber
ssl-vpn server-policy access-policy
ip route-static 0.0.0.0 0.0.0.0 192.168.100.112 ip route-static 192.168.100.128 255.255.255.128 192.168.100.112 ip route-static 192.168.100.133 255.255.255.255 192.168.100.112
info-center source FILTER channel 1 log state off info-center loghost 192.168.100.45 undo info-center enable
snmp-agent snmp-agent local-engineid 800063A2030CDA41B211187 snmp-agent community read public snmp-agent sys-info version all
ssh server enable
ip https ssl-server-policy default ip https enable
load xml-configuration
user-interface con 0 user-interface vty 0 4 authentication-mode scheme
return