# Huawei Versatile Routing Platform Software
# VRP (R) software, Version 5.170 (S5735 V200R019C10SPC500)
# Copyright (C) 2000-2020 HUAWEI TECH Co., Ltd.
# 
# DDR             Memory Size : 1024  M bytes
# FLASH Total     Memory Size : 512   M bytes
# FLASH Available Memory Size : 306   M bytes
# Pcb           Version   : VER.B
# BootROM(1st)       Version   : 0000.0121
# BootROM(2nd)       Version   : 0000.0200
# BootLoad      Version   : 0213.0000
# CPLD          Version   : 0105 
# Software      Version   : VRP (R) Software, Version 5.170 (V200R019C10SPC500)
# FLASH         Version   : 0000.0000
# S5735S-L48T4X-A's Device status:
# Slot Sub  Type                   Online    Power    Register     Status   Role  
# --------------------------------------------------------------------------------------
# 0    -    S5735S-L48T4X-A        Present   PowerOn  Registered   Normal   Master
!Software Version V200R019C10SPC500
#
sysname TY2-H03-TOR-S5735S-A-25U
#
vlan batch 27 to 30 300
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name dot1xmac_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name multi_authen_profile
authentication-profile name portal_authen_profile
#
clock timezone JP add 08:00:00
#
diffserv domain default
#
radius-server template default
#
hwtacacs-server template peg
 hwtacacs-server authentication 104.233.160.2
 hwtacacs-server authorization 104.233.160.2
 hwtacacs-server accounting 104.233.160.2
 hwtacacs-server shared-key cipher %^%#7UiLPv*Fp'+8vS#zk/VEs;+/Hl9ItJ=G%)O^|b2$%^%#
#
pki realm default
 certificate-check none
#
acl name acl4snmp 2999
 rule 5 permit source 104.233.160.0 0.0.0.15
 rule 10 permit source 10.0.19.0 0.0.0.255
 rule 15 permit source 137.175.10.64 0.0.0.31
 rule 20 permit source 199.180.101.101 0
#
acl name acl4outintGigabitEthernet0/0/33 3927
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/33 3928
 rule 1 deny ip source 10.0.0.0 0.255.255.255
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 107.149.254.176 0.0.0.7
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/45 3929
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/45 3930
 rule 1 deny ip source 10.0.0.0 0.255.255.255
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 38.173.39.0 0.0.0.255
 rule 605 permit ip source 107.148.75.24 0.0.0.7
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/35 3935
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/35 3936
 rule 1 deny ip source 10.0.0.0 0.255.255.255
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 104.233.171.134 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/34 3937
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/34 3938
 rule 1 deny ip source 10.0.0.0 0.255.255.255
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 107.148.60.8 0.0.0.7
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/14 3941
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/14 3942
 rule 1 deny ip source 10.0.0.0 0.255.255.255
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 107.149.254.120 0.0.0.7
 rule 605 permit ip source 38.173.20.160 0.0.0.31
 rule 610 permit ip source 38.173.24.0 0.0.0.31
 rule 615 permit ip source 38.177.185.192 0.0.0.31
 rule 620 permit ip source 38.177.186.192 0.0.0.31
 rule 625 permit ip source 38.177.187.192 0.0.0.31
 rule 630 permit ip source 38.177.189.128 0.0.0.31
 rule 635 permit ip source 38.177.190.128 0.0.0.31
 rule 640 permit ip source 38.177.191.64 0.0.0.31
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/44 3943
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/00/24 3944
acl name acl4intGigabitEthernet0/0/44 3945
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 104.233.166.132 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/26 3946
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4outintGigabitEthernet0/0/43 3947
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/43 3948
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 41 permit ip source 104.233.172.37 0
 rule 42 permit ip source 104.233.172.38 0
 rule 43 permit ip source 104.233.172.39 0
 rule 44 permit ip source 104.233.172.41 0
 rule 45 permit ip source 104.233.172.42 0
 rule 50 deny udp destination-port eq 500
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 300 permit ip source 104.233.168.14 0
 rule 310 permit ip source 104.233.168.15 0
 rule 320 permit ip source 104.233.168.16 0
 rule 330 permit ip source 104.233.168.17 0
 rule 340 permit ip source 104.233.168.18 0
 rule 900 deny ip
acl name acl4intGigabitEthernet0/0/26 3949
 rule 1 deny ip source 10.0.0.0 0.255.255.255
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 104.233.166.136 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/1 3950
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/1 3951
 rule 1 deny ip source 10.0.0.0 0.255.255.255
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 104.233.168.28 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/3 3952
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intg0/0/23 3953
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny udp destination-port eq 500
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 85 permit ip source 104.233.168.7 0
 rule 90 permit ip source 104.233.168.8 0
 rule 95 permit ip source 104.233.168.9 0
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 280 deny tcp destination-port eq 1723
 rule 290 deny tcp source-port eq 1723
 rule 900 deny ip
acl name acl4intGigabitEthernet0/0/3 3954
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny udp destination-port eq 500
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 280 deny tcp destination-port eq 1723
 rule 290 deny tcp source-port eq 1723
 rule 295 permit ip source 104.233.172.10 0
 rule 300 permit ip source 104.233.172.11 0
 rule 305 permit ip source 104.233.174.124 0
 rule 310 permit ip source 104.233.168.96 0.0.0.7
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/15 3957
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4outintGigabitEthernet0/0/23 3958
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/23 3959
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny udp destination-port eq 500
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 280 deny tcp destination-port eq 1723
 rule 290 deny tcp source-port eq 1723
 rule 295 permit ip source 104.233.174.121 0
 rule 300 permit ip source 104.233.174.125 0
 rule 305 permit ip source 104.233.174.227 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/25 3960
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/25 3961
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny udp destination-port eq 500
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 280 deny tcp destination-port eq 1723
 rule 290 deny tcp source-port eq 1723
 rule 295 permit ip source 104.233.174.107 0
 rule 900 deny ip
acl name acl4intGigabitEthernet0/0/15 3962
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 104.233.171.181 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/6 3963
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/6 3964
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 104.233.169.52 0
 rule 605 permit ip source 104.233.169.53 0
 rule 610 permit ip source 104.233.169.54 0
 rule 615 permit ip source 104.233.169.55 0
 rule 620 permit ip source 104.233.169.56 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/31 3965
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4outintGigabitEthernet0/0/21 3966
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/21 3967
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny udp destination-port eq 500
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 280 deny tcp destination-port eq 1723
 rule 290 deny tcp source-port eq 1723
 rule 295 permit ip source 104.219.208.77 0
 rule 300 permit ip source 104.219.208.78 0
 rule 305 permit ip source 104.219.208.79 0
 rule 310 permit ip source 104.219.208.80 0
 rule 315 permit ip source 104.219.208.81 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/24 3968
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/24 3969
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny udp destination-port eq 500
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 280 deny tcp destination-port eq 1723
 rule 290 deny tcp source-port eq 1723
 rule 295 permit ip source 104.233.171.235 0
 rule 300 permit ip source 104.233.171.236 0
 rule 305 permit ip source 104.233.171.237 0
 rule 310 permit ip source 104.233.171.238 0
 rule 315 permit ip source 104.233.172.2 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/7 3972
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/7 3973
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny udp destination-port eq 500
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 275 permit ip source 104.233.165.16 0
 rule 280 permit ip source 104.233.165.17 0
 rule 285 permit ip source 104.233.165.18 0
 rule 290 permit ip source 104.233.165.22 0
 rule 295 permit ip source 104.233.165.23 0
 rule 300 permit ip source 104.233.165.72 0.0.0.7
 rule 900 deny ip
acl name acl4intGigabitEthernet0/0/31 3974
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 104.233.164.166 0
 rule 605 permit ip source 104.233.164.167 0
 rule 610 permit ip source 104.233.164.168 0
 rule 615 permit ip source 104.233.164.169 0
 rule 620 permit ip source 104.233.164.170 0
 rule 625 permit ip source 104.233.165.80 0.0.0.7
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/20 3977
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/20 3978
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 104.233.161.74 0
 rule 605 permit ip source 104.233.161.76 0
 rule 610 permit ip source 104.233.161.87 0
 rule 615 permit ip source 104.233.161.88 0
 rule 620 permit ip source 104.233.161.89 0
 rule 625 permit ip source 38.33.140.0 0.0.0.255
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/19 3979
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4outintGigabitEthernet0/0/18 3980
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/18 3981
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny udp destination-port eq 500
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 280 deny tcp destination-port eq 1723
 rule 290 deny tcp source-port eq 1723
 rule 295 permit ip source 104.233.166.140 0
 rule 900 deny ip
acl name acl4intGigabitEthernet0/0/19 3982
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 104.233.166.133 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/41 3983
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/41 3984
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 104.233.165.8 0
 rule 605 permit ip source 104.233.165.9 0
 rule 610 permit ip source 104.233.165.11 0
 rule 615 permit ip source 104.233.165.13 0
 rule 620 permit ip source 104.233.165.88 0.0.0.7
 rule 900 deny ip
acl name acl4intGigabitEthernet0/0/42' 3985
acl name acl4outintGigabitEthernet0/0/13 3986
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/13 3987
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 104.233.168.25 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/42 3988
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/42 3989
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny udp destination-port eq 500
 rule 51 permit ip source 104.233.171.209 0
 rule 52 permit ip source 104.233.171.218 0
 rule 53 permit ip source 104.233.171.219 0
 rule 54 permit ip source 104.233.172.23 0
 rule 55 permit ip source 104.233.172.24 0
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 300 permit ip source 104.233.175.131 0
 rule 305 permit ip source 104.233.175.132 0
 rule 310 permit ip source 104.233.175.133 0
 rule 315 permit ip source 104.233.175.134 0
 rule 320 permit ip source 104.233.175.135 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/5 3992
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/5 3993
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny udp destination-port eq 500
 rule 60 deny udp source-port eq 500
 rule 70 deny udp destination-port eq 4500
 rule 80 deny udp source-port eq 4500
 rule 210 deny tcp destination-port eq 3372
 rule 220 deny tcp destination-port eq smtp
 rule 230 deny tcp source-port eq smtp
 rule 240 deny tcp destination-port eq 465
 rule 250 deny tcp source-port eq 465
 rule 260 deny tcp destination-port eq 587
 rule 270 deny tcp source-port eq 587
 rule 280 deny tcp destination-port eq 1723
 rule 290 deny tcp source-port eq 1723
 rule 295 permit ip source 104.233.161.81 0
 rule 300 permit ip source 104.233.171.195 0
 rule 305 permit ip source 104.233.171.204 0
 rule 310 permit ip source 104.233.171.245 0
 rule 315 permit ip source 104.233.171.246 0
 rule 320 permit ip source 107.148.102.128 0.0.0.63
 rule 325 permit ip source 107.148.112.128 0.0.0.63
 rule 330 permit ip source 107.148.113.64 0.0.0.63
 rule 335 permit ip source 38.173.93.192 0.0.0.63
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/17 3994
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/17 3995
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 104.233.168.10 0
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/9 3996
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/9 3997
 rule 1 deny ip source 10.0.0.0 0.255.255.255
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 107.148.75.16 0.0.0.7
 rule 605 permit ip source 38.11.144.64 0.0.0.63
 rule 610 permit ip source 38.11.146.128 0.0.0.63
 rule 615 permit ip source 38.11.148.64 0.0.0.63
 rule 620 permit ip source 38.11.149.64 0.0.0.63
 rule 900 deny ip
acl name acl4outintGigabitEthernet0/0/10 3998
 rule 10 deny tcp destination-port eq 135
 rule 20 deny tcp destination-port eq 137
 rule 30 deny tcp destination-port eq 138
 rule 40 deny tcp destination-port eq 139
 rule 50 deny ip source 192.168.30.1 0
 rule 810 permit ip
acl name acl4intGigabitEthernet0/0/10 3999
 rule 1 deny ip source 10.0.0.0 0.255.255.255
 rule 10 permit udp destination-port eq bootps
 rule 20 permit udp destination-port eq bootpc
 rule 30 deny udp destination-port eq 0
 rule 40 deny udp destination-port eq 80
 rule 50 deny tcp destination-port eq 3372
 rule 570 deny tcp destination-port eq smtp
 rule 575 deny tcp source-port eq smtp
 rule 580 deny tcp destination-port eq 465
 rule 585 deny tcp source-port eq 465
 rule 590 deny tcp destination-port eq 587
 rule 595 deny tcp source-port eq 587
 rule 600 permit ip source 38.14.3.128 0.0.0.63
 rule 605 permit ip source 38.33.190.192 0.0.0.63
 rule 610 permit ip source 38.14.12.128 0.0.0.63
 rule 615 permit ip source 38.33.175.192 0.0.0.63
 rule 620 permit ip source 107.149.254.88 0.0.0.7
 rule 900 deny ip
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
aaa
 authentication-scheme default
  authentication-mode local
 authentication-scheme peg
  authentication-mode hwtacacs local
 authentication-scheme radius
  authentication-mode radius
 authorization-scheme default
  authorization-mode local
 authorization-scheme peg
  authorization-mode hwtacacs local
 accounting-scheme default
  accounting-mode none
 accounting-scheme peg
  accounting-mode hwtacacs
 recording-scheme peg
  recording-mode hwtacacs peg
 cmd recording-scheme peg
 local-aaa-user password policy administrator 
  password history record number 0
  password expire 0
 domain default
  authentication-scheme radius
  accounting-scheme default
  radius-server default
 domain default_admin
  authentication-scheme peg
  accounting-scheme peg
  authorization-scheme peg
  hwtacacs-server peg
 local-user admin password irreversible-cipher $1c$=Wck%.S1LV$t|,>(nk,JRv4nT7\oQ,#r"|k47\HJ;E^AK6`|7#-$
 local-user admin privilege level 15
 local-user admin service-type terminal http
#
ntp-service server disable
ntp-service ipv6 server disable
ntp-service unicast-server 104.233.160.2
#
interface Vlanif1
#
interface MEth0/0/1
 ip address 10.0.19.37 255.255.255.0
#
*interface MEth0/0/2
#
interface Eth-Trunk17
 description TY2-H03-BAS-CE6851-A-44U@lag12
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 27 to 30
 mode lacp
#
interface GigabitEthernet0/0/1
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/1
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/1
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/2
 shutdown
 port link-type access
 port default vlan 30
 port-isolate enable group 1
#
interface GigabitEthernet0/0/3
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/3
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/3
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/4
 shutdown
 port link-type access
 port default vlan 30
 port-isolate enable group 1
#
interface GigabitEthernet0/0/5
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/5
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/5
 qos lr outbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/6
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/6
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/6
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/7
 port link-type access
 port default vlan 29
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/7
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/7
 port-isolate enable group 1
#
interface GigabitEthernet0/0/8
 shutdown
 port link-type access
 port default vlan 30
 port-isolate enable group 1
#
interface GigabitEthernet0/0/9
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/9
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/9
 port-isolate enable group 1
#
interface GigabitEthernet0/0/10
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/10
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/10
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/11
 shutdown
 port link-type access
 port default vlan 30
#
interface GigabitEthernet0/0/12
 shutdown
 port link-type access
 port default vlan 30
#
interface GigabitEthernet0/0/13
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/13
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/13
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/14
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/14
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/14
 port-isolate enable group 1
#
interface GigabitEthernet0/0/15
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/15
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/15
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/16
 shutdown
 port link-type access
 port default vlan 30
 port-isolate enable group 1
#
interface GigabitEthernet0/0/17
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/17
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/17
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/18
 auto speed 100
 port link-type access
 port default vlan 28
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/18
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/18
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/19
 auto speed 100
 port link-type access
 port default vlan 28
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/19
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/19
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/20
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/20
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/20
 port-isolate enable group 1
#
interface GigabitEthernet0/0/21
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/21
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/21
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/22
 shutdown
 port link-type access
 port default vlan 30
 port-isolate enable group 1
#
interface GigabitEthernet0/0/23
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/23
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/23
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/24
 auto speed 10
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/24
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/24
 qos lr outbound cir 5000 cbs 65535
 qos lr inbound cir 1000 cbs 65535
#
interface GigabitEthernet0/0/25
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/25
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/25
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/26
 auto speed 100
 port link-type access
 port default vlan 28
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/26
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/26
 port-isolate enable group 1
 qos lr outbound cir 30000 cbs 65535
 qos lr inbound cir 30000 cbs 65535
#
interface GigabitEthernet0/0/27
 shutdown
 port link-type access
 port default vlan 27
#
interface GigabitEthernet0/0/28
 auto speed 100
 port link-type access
 port default vlan 30
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/29
 shutdown
 port link-type access
 port default vlan 30
 port-isolate enable group 1
#
interface GigabitEthernet0/0/30
 shutdown
 port link-type access
 port default vlan 30
 port-isolate enable group 1
#
interface GigabitEthernet0/0/31
 auto speed 100
 port link-type access
 port default vlan 29
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/31
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/31
 port-isolate enable group 1
 qos lr outbound cir 20000 cbs 65535
 qos lr inbound cir 20000 cbs 65535
#
interface GigabitEthernet0/0/32
 shutdown
 port link-type access
 port default vlan 30
 port-isolate enable group 1
#
interface GigabitEthernet0/0/33
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/33
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/33
 port-isolate enable group 1
 qos lr outbound cir 15000 cbs 65535
 qos lr inbound cir 15000 cbs 65535
#
interface GigabitEthernet0/0/34
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/34
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/34
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/35
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/35
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/35
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/36
 shutdown
 port link-type access
 port default vlan 30
 port-isolate enable group 1
#
interface GigabitEthernet0/0/37
 shutdown
 port link-type access
 port default vlan 30
 port-isolate enable group 1
#
interface GigabitEthernet0/0/38
 port link-type access
 port default vlan 30
#
interface GigabitEthernet0/0/39
 shutdown
 port link-type access
 port default vlan 30
 port-isolate enable group 1
#
interface GigabitEthernet0/0/40
 shutdown
 port link-type access
 port default vlan 29
 port-isolate enable group 1
#
interface GigabitEthernet0/0/41
 auto speed 100
 port link-type access
 port default vlan 29
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/41
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/41
 port-isolate enable group 1
 qos lr outbound cir 6000 cbs 65535
 qos lr inbound cir 6000 cbs 65535
#
interface GigabitEthernet0/0/42
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/42
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/42
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/43
 auto speed 100
 port link-type access
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/43
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/43
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/44
 port link-type access
 port default vlan 28
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/44
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/44
 port-isolate enable group 1
#
interface GigabitEthernet0/0/45
 auto speed 100
 port default vlan 30
 traffic-filter inbound acl name acl4intGigabitEthernet0/0/45
 traffic-filter outbound acl name acl4outintGigabitEthernet0/0/45
 port-isolate enable group 1
 qos lr outbound cir 50000 cbs 65535
 qos lr inbound cir 50000 cbs 65535
#
interface GigabitEthernet0/0/46
#
interface GigabitEthernet0/0/47
#
interface GigabitEthernet0/0/48
#
interface XGigabitEthernet0/0/1
#
interface XGigabitEthernet0/0/2
#
interface XGigabitEthernet0/0/3
 description lag17
 eth-trunk 17
#
interface XGigabitEthernet0/0/4
 description lag17
 eth-trunk 17
#
interface NULL0
#
undo icmp name timestamp-request receive
#
ip route-static 0.0.0.0 0.0.0.0 10.0.19.254
#
snmp-agent
snmp-agent local-engineid 800007DB03FC1BD1D884E8
snmp-agent community read cipher %^%#=b3qTdmVXDcnjU,Qc^E~U0VzK>n!1S~CWCQ[kZw40:Kk8L6Yz$"S=X7vsJ:2")s88u]4"YLv[]Xp(zO@%^%# acl acl4snmp
snmp-agent sys-info location JP
snmp-agent sys-info version v2c v3
#
stelnet server enable
ssh server cipher aes256_ctr aes128_ctr
ssh server hmac sha2_256
ssh client cipher aes256_ctr aes128_ctr
ssh client hmac sha2_256
ssh server dh-exchange min-len 2048
#
user-interface con 0
 authentication-mode password
 set authentication password cipher $1a$j\\(Zp{XOG$"kfhPJ%q0Yq1>e3"a7&;\m&eBodj72z>7@AQ,>XW$
user-interface vty 0 4
 acl acl4snmp inbound
 authentication-mode aaa
 protocol inbound all
user-interface vty 16 20
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#
ops
#
return