[Huawei]display current-configuration [V300R024C00SPC100] # drop illegal-mac alarm # authentication-profile name default_authen_profile authentication-profile name dot1x_authen_profile authentication-profile name dot1xmac_authen_profile authentication-profile name mac_authen_profile authentication-profile name multi_authen_profile authentication-profile name portal_authen_profile # dhcp enable # radius-server template default # pki realm default certificate-check none # ssl policy default_policy type server pki-realm default version tls1.2 ciphersuite rsa_aes_128_sha256 rsa_aes_256_sha256 ecdhe_rsa_aes128_gcm_sha256 ecdhe_rsa_aes256_gcm_sha384 # acl number 2000 rule 5 permit source 192.168.10.2 0 rule 1000 deny # acl number 3000 rule 5 permit tcp source 192.168.10.2 0 destination 10.2.0.0 0.0.0.255 destination-port eq www rule 10 permit icmp source 192.168.10.0 0.0.0.255 destination 10.2.0.2 0 icmp-type echo rule 1000 deny ip # ike proposal default encryption-algorithm aes-256 aes-192 aes-128 aes-gcm-256 aes-gcm-192 aes-gcm-128 dh group14 authentication-algorithm sha2-512 sha2-384 sha2-256 authentication-method pre-share integrity-algorithm hmac-sha2-256 prf hmac-sha2-256 # free-rule-template name default_free_rule # portal-access-profile name portal_access_profile # aaa authentication-scheme default authentication-mode local authentication-scheme radius authentication-mode radius authorization-scheme default authorization-mode local accounting-scheme default accounting-mode none local-aaa-user password policy administrator domain default authentication-scheme default accounting-scheme default radius-server default domain default_admin authentication-scheme default accounting-scheme default local-user admin password irreversible-cipher $1a$hrU=O0CMx+$-4KOAeLP`JD.b7P>T,3AL(fy&[=C^JRmCuIS{GPN$ local-user admin privilege level 15 local-user admin service-type terminal ssh # web set fast-configuration state disable # firewall zone Local # mi-server # interface Vlanif1 ip address 192.168.1.1 255.255.255.0 dhcp select interface # interface GigabitEthernet0/0/0 # interface GigabitEthernet0/0/1 undo portswitch ip address 10.2.0.1 255.255.255.0 # interface GigabitEthernet0/0/2 ip address 192.168.10.1 255.255.255.0 traffic-filter inbound acl 3000 # interface GigabitEthernet0/0/3 # interface GigabitEthernet0/0/4 # interface GigabitEthernet0/0/5 # interface GigabitEthernet0/0/6 # interface GigabitEthernet0/0/7 # interface GigabitEthernet0/0/8 # interface GigabitEthernet0/0/9 description VirtualPort # interface NULL0 # cellular profile default modem auto-recovery dial action modem-reboot fail-times 128 modem auto-recovery icmp-unreachable action modem-reboot modem auto-recovery services-unavailable action modem-reboot test-times 0 interval 3600 # undo icmp name timestamp-request receive # snmp-agent local-engineid 800007DB03C4D438CDFC11 # ssh user admin authentication-type password stelnet server enable ssh server permit interface all # http secure-server ssl-policy default_policy http secure-server enable http server permit interface GigabitEthernet0/0/8 # fib regularly-refresh disable # user-interface con 0 authentication-mode aaa idle-timeout 0 0 user-interface vty 0 acl 2000 inbound authentication-mode aaa user privilege level 15 protocol inbound ssh user-interface vty 1 4 acl 2000 inbound authentication-mode aaa protocol inbound ssh # wlan ac traffic-profile name default security-profile name default security-profile name default-wds security wpa2 psk pass-phrase %^%#-ezU(:$uVNNwFwVm~Kx*Mf<$B2_#B#6W4+X-^O!7%^%# aes ssid-profile name default vap-profile name default wds-profile name default regulatory-domain-profile name default air-scan-profile name default rrm-profile name default radio-2g-profile name default radio-5g-profile name default wids-spoof-profile name default wids-profile name default ap-system-profile name default port-link-profile name default wired-port-profile name default ap-group name default # dot1x-access-profile name dot1x_access_profile # mac-access-profile name mac_access_profile # voice # enterprise default # diagnose # ops # autostart # secelog # ms-channel # return