[HUAWEI]display current-configuration !Software Version V200R019C10SPC500 # sysname HUAWEI # vlan batch 10 20 # authentication-profile name default_authen_profile authentication-profile name dot1x_authen_profile authentication-profile name dot1xmac_authen_profile authentication-profile name mac_authen_profile authentication-profile name multi_authen_profile authentication-profile name portal_authen_profile # clock timezone huawei add 01:00:00 # dhcp enable # dhcp snooping enable # diffserv domain default # radius-server template default # pki realm default certificate-check none # free-rule-template name default_free_rule # portal-access-profile name portal_access_profile # drop-profile default # vlan 10 dhcp snooping enable ipv4 source check user-bind enable ipv6 source check user-bind enable vlan 20 dhcp snooping enable ipv4 source check user-bind enable ipv6 source check user-bind enable # aaa authentication-scheme default authentication-mode local authentication-scheme radius authentication-mode radius authorization-scheme default authorization-mode local accounting-scheme default accounting-mode none local-aaa-user password policy administrator password history record number 0 password expire 0 domain default authentication-scheme radius accounting-scheme default radius-server default domain default_admin authentication-scheme default accounting-scheme default local-user admin password irreversible-cipher $1c$W\%7$Wm4P%$qrd7=2028WJK6tWqq}"47dvv6#4#[OS85a/s(9d&$ local-user admin privilege level 15 local-user admin service-type terminal http # interface Vlanif1 # interface MEth0/0/1 ip address 192.168.1.253 255.255.255.0 # interface GigabitEthernet0/0/1 port link-type access port default vlan 10 port-security enable port-security protect-action protect port-security mac-address sticky # interface GigabitEthernet0/0/2 port link-type access port default vlan 10 # interface GigabitEthernet0/0/3 port link-type access port default vlan 20 port-security enable port-security protect-action protect port-security mac-address sticky # interface GigabitEthernet0/0/4 port link-type access port default vlan 20 # interface GigabitEthernet0/0/5 port link-type access port default vlan 20 # interface GigabitEthernet0/0/6 port link-type trunk port trunk allow-pass vlan 10 20 dhcp snooping trusted # interface GigabitEthernet0/0/7 # interface GigabitEthernet0/0/8 # interface GigabitEthernet0/0/9 # interface GigabitEthernet0/0/10 # interface GigabitEthernet0/0/11 # interface GigabitEthernet0/0/12 # interface GigabitEthernet0/0/13 # interface GigabitEthernet0/0/14 # interface GigabitEthernet0/0/15 # interface GigabitEthernet0/0/16 # interface GigabitEthernet0/0/17 # interface GigabitEthernet0/0/18 # interface GigabitEthernet0/0/19 # interface GigabitEthernet0/0/20 # interface GigabitEthernet0/0/21 # interface GigabitEthernet0/0/22 # interface GigabitEthernet0/0/23 # interface GigabitEthernet0/0/24 # interface GigabitEthernet0/0/25 # interface GigabitEthernet0/0/26 # interface GigabitEthernet0/0/27 # interface GigabitEthernet0/0/28 # interface XGigabitEthernet0/0/1 # interface XGigabitEthernet0/0/2 # interface XGigabitEthernet0/0/3 # interface XGigabitEthernet0/0/4 # interface NULL0 # undo icmp name timestamp-request receive # ssh server cipher aes256_ctr aes128_ctr ssh server hmac sha2_256 ssh client cipher aes256_ctr aes128_ctr ssh client hmac sha2_256 ssh server dh-exchange min-len 2048 # user-interface con 0 authentication-mode none idle-timeout 0 0 user-interface vty 0 4 user-interface vty 16 20 # dot1x-access-profile name dot1x_access_profile # mac-access-profile name mac_access_profile # ops # return