Hi All!
We have changed firmware version on PowerConnect 6224 model from 1.0.0.27 to 2.2.0.3 because of VLANs features didn't work properly.
Now we are happy with VLANS freatures, but we have another problem:
We have configured radius AAA on that swith with Active Directory authentication.
When I try to login through ssh using domain credentials I enter in unprivileged mode, then I type enable command and I get privilege 15 - it's OK.
But when I try to enter through http GUI using my domain credentials I enter to it with read only privilege and I don't know how to turn privilege 15 on and get full administrators rights on it.
Could anybody tell me how possible it is?
All my configs and info you can see below.
Thank you!
switch18-root#show ver
Image Descriptions
image1 : default image image2 :
Images currently available on Flash
-------------------------------------------------------------------- unit image1 image2 current-active next-active --------------------------------------------------------------------
1 1.0.0.27 2.2.0.3 image2 image2
switch18-root#show systemSystem Description: Dell Ethernet SwitchSystem Up Time: 2 days, 19h:08m:43sSystem Contact: System Name: switch18-rootSystem Location: Burned In MAC Address: 0019.B990.59AESystem Object ID: 1.3.6.1.4.1.674.10895.3010System Model ID: PCT6224Machine Type: Dell 24 Port Gigabit EthernetTemperature Sensors:
Unit Temperature (Celsius) Status---- --------------------- ------ 1 19 OK
Fans:
Unit Description Status---- ----------- ------ 1 Fan 1 OK 1 Fan 2 OK 1 Fan 3 OK
switch18-root#show running-config all!Current Configuration:!System Description "Dell 24 Port Gigabit Ethernet, 2.2.0.3, VxWorks5.5.1"!System Software Version 2.2.0.3!configureno gvrp enablevlan databasevlan 1,6no ip igmp snooping 1no ip igmp snooping fast-leave 1ip igmp snooping groupmembership-interval 1 260ip igmp snooping maxresponse 1 10ip igmp snooping mcrtrexpiretime 1 300no ip igmp snooping querier 1ip igmp snooping querier 1 address 0.0.0.0no ip igmp snooping querier election participate 1no ip igmp snooping 6no ip igmp snooping fast-leave 6ip igmp snooping groupmembership-interval 6 260ip igmp snooping maxresponse 6 10ip igmp snooping mcrtrexpiretime 6 300
no ip igmp snooping querier 6ip igmp snooping querier 6 address 0.0.0.0no ip igmp snooping querier election participate 6exitip telnet server disableno ip telnet port 0hostname "switch18-root"sntp unicast client enablesntp client poll timer 64no sntp authenticatesntp server XX.XX.XX.XX priority 1 pollsntp server XX.XX.XX.XX priority 1 pollclock timezone 0 minutes 0 zone ""stackmember 1 1exitip address noneip address XX.XX.XX.XX 255.255.0.0ip default-gateway XX.XX.XX.XXip address vlan 1no ip domain-lookup
ip domain-name nC.comip name-server XX.XX.XX.XXip name-server XX.XX.XX.XXlogging onlogging console debugno logging cli-commandno logging snmpno logging web-sessionlogging file debuglogging buffered debuglogging buffered size 200logging facility local7logging sysloglacp system-priority 1ip https serverip https port 443ip https certificate 1ip http serverip http port 80ipv6 router ospfno enable
exit-overflow-interval 0no maximum-pathsarea 0.0.0.0 default-cost 1no area 0.0.0.0 stub no-summaryexternal-lsdb-limit -1redistribute connected metric-type 2 tag 0 subnetsredistribute static metric-type 2 tag 0 subnetsredistribute rip metric-type 2 tag 0 subnetsredistribute bgp metric-type 2 tag 0 subnetsdistance ospf intra 8distance ospf inter 10distance ospf type1 13distance ospf type2 150exitipv6 forwardingno ipv6 unicast-routingipv6 route distance 1no service dhcpv6ip redirectsno ip routingip route distance 1
ip forwardingarp dynamicrenewarp timeout 1200arp resptime 1arp retries 4arp cachesize 896no bootpdhcprelay enablebootpdhcprelay maxhopcount 4bootpdhcprelay minwaittime 0bootpdhcprelay serverip 0.0.0.0no bootpdhcprelay cidridoptmoderouter ripenableno distance ripsplit-horizon simpleno auto-summaryhostroutesacceptno default-information originateno redistribute connectedno redistribute staticno redistribute ospf
exitinterface vlan 1bridge multicast forward-unregisteredexitinterface vlan 6bridge multicast forward-unregisteredexitno ip dvmrpno ip dvmrp trapflagsno ip igmpip igmp router-alert-optionalno ip pimdmno ip pimsmip pimsm spt-threshold 50ip pimsm message-interval 60ip pimsm register-rate-limit 50no ip pim-trapflagsno ip multicastno passwords min-lengthpasswords history 0passwords lock-out 0
passwords aging 0username "admin" password b0d0f9818526bb1b54c79c0b5319c06c level 15 encryptedusername snmpv3 accessmode "admin" readonlyusername snmpv3 authentication "admin" noneusername snmpv3 encryption "admin" noneaaa authentication login "networkList" noneaaa authentication login "Console" noneaaa authentication login "FreeRadius" radiusaaa authentication enable "enableList" enableaaa authentication enable "Console" noneip http authentication radiusip https authentication noneno dot1x system-auth-controlno aaa authorization network default radiusno voice vlanradius-server attribute 4 XX.XX.XX.XXradius-server timeout 3radius-server retransmit 3radius-server deadtime 0radius-server source-ip 0.0.0.0radius-server key "delltest"
radius-server host XX.XX.XX.XXauth-port 1812timeout 3retransmit 3deadtime 0source-ip 0.0.0.0priority 0usage allkey "delltest"exittacacs-server host XX.XX.XX.XXexittacacs-server key "delltest"no monitor session 1 modeline consoleexec-timeout 10historyhistory size 10speed 9600login authentication Consoleenable authentication Console
password encryptedexitline telnethistoryhistory size 10exec-timeout 10login authentication FreeRadiusenable authentication Consolepassword encryptedexitline sshsshcon maxsessions 5historyhistory size 10exec-timeout 10login authentication FreeRadiusenable authentication Consolepassword encryptedexitip ssh serverip ssh port 22
ip ssh pubkey-authrmon table-size history 270rmon table-size log 100transport output telnetsession-timeout 600session-limit 5no flowcontrolspanning-treespanning-tree bpdu filteringspanning-tree bpdu-protectionspanning-tree max-age 20spanning-tree hello-time 2spanning-tree forward-time 15no spanning-tree mst max-hopsspanning-tree mode stpspanning-tree priority 32768spanning-tree mst configurationname "00-19-B9-90-59-AE"exitspanning-tree mst configurationrevision 0
exitbridge aging-time 300bridge multicast filteringno switchport protected 0 nameno switchport protected 1 nameno switchport protected 2 name!Management ACALmanagement access-list "All"permit service ssh priority 1permit service snmp priority 2permit service https priority 3permit service http priority 4permit service tftp priority 5permit service telnet priority 6exitno ip igmp snoopingno ip igmp snooping querierip igmp snooping querier address 0.0.0.0ip igmp snooping querier version 2ip igmp snooping querier query-interval 60ip igmp snooping querier timer expiry 60
no ip dhcp filteringrouter ospfenable1583compatibilityno maximum-pathsexit-overflow-interval 0no trapflagstimers spf 5 10area 0.0.0.0 default-cost 1no area 0.0.0.0 stub no-summaryno external-lsdb-limitno redistribute connectedno redistribute staticno redistribute ripdistance ospf type2 150distance ospf type1 13distance ospf inter 10distance ospf intra 8exitno ip vrrpclassofservice dot1p-mapping 0 1
classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3no classofservice trustclassofservice ip-dscp-mapping 0 1classofservice ip-dscp-mapping 1 1classofservice ip-dscp-mapping 2 1classofservice ip-dscp-mapping 3 1classofservice ip-dscp-mapping 4 1classofservice ip-dscp-mapping 5 1classofservice ip-dscp-mapping 6 1classofservice ip-dscp-mapping 7 1classofservice ip-dscp-mapping 8 0classofservice ip-dscp-mapping 9 0classofservice ip-dscp-mapping 10 0classofservice ip-dscp-mapping 11 0classofservice ip-dscp-mapping 12 0
classofservice ip-dscp-mapping 13 0classofservice ip-dscp-mapping 14 0classofservice ip-dscp-mapping 15 0classofservice ip-dscp-mapping 16 0classofservice ip-dscp-mapping 17 0classofservice ip-dscp-mapping 18 0classofservice ip-dscp-mapping 19 0classofservice ip-dscp-mapping 20 0classofservice ip-dscp-mapping 21 0classofservice ip-dscp-mapping 22 0classofservice ip-dscp-mapping 23 0classofservice ip-dscp-mapping 24 1classofservice ip-dscp-mapping 25 1classofservice ip-dscp-mapping 26 1classofservice ip-dscp-mapping 27 1classofservice ip-dscp-mapping 28 1classofservice ip-dscp-mapping 29 1classofservice ip-dscp-mapping 30 1classofservice ip-dscp-mapping 31 1classofservice ip-dscp-mapping 32 2classofservice ip-dscp-mapping 33 2
classofservice ip-dscp-mapping 34 2classofservice ip-dscp-mapping 35 2classofservice ip-dscp-mapping 36 2classofservice ip-dscp-mapping 37 2classofservice ip-dscp-mapping 38 2classofservice ip-dscp-mapping 39 2classofservice ip-dscp-mapping 40 2classofservice ip-dscp-mapping 41 2classofservice ip-dscp-mapping 42 2classofservice ip-dscp-mapping 43 2classofservice ip-dscp-mapping 44 2classofservice ip-dscp-mapping 45 2classofservice ip-dscp-mapping 46 2classofservice ip-dscp-mapping 47 2classofservice ip-dscp-mapping 48 3classofservice ip-dscp-mapping 49 3classofservice ip-dscp-mapping 50 3classofservice ip-dscp-mapping 51 3classofservice ip-dscp-mapping 52 3classofservice ip-dscp-mapping 53 3classofservice ip-dscp-mapping 54 3
classofservice ip-dscp-mapping 55 3classofservice ip-dscp-mapping 56 3classofservice ip-dscp-mapping 57 3classofservice ip-dscp-mapping 58 3classofservice ip-dscp-mapping 59 3classofservice ip-dscp-mapping 60 3classofservice ip-dscp-mapping 61 3classofservice ip-dscp-mapping 62 3classofservice ip-dscp-mapping 63 3cos-queue min-bandwidth 0 0 0 0 0 0 0no cos-queue strict 0 1 2 3 4 5 6traffic-shape 0 kbpsdvlan-tunnel ethertype 802.1Qno dos-control sipdipno dos-control firstfragno dos-control tcpfragno dos-control tcpflagno dos-control l4portno dos-control icmp!interface ethernet 1/g1
negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16
no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trust
classofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode generalswitchport general pvid 1no switchport general acceptable-frame-type tagged-onlyno switchport general ingress-filtering disableswitchport general allowed vlan add 6 taggedno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlv
no lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g2negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authentication
dot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snooping
ip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port security
port security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g3negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5
no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60
garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3
classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g4negotiation allmdix auto
storm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0
traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0
classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode generalswitchport general pvid 1no switchport general acceptable-frame-type tagged-onlyno switchport general ingress-filtering disableswitchport general allowed vlan add 6 taggedno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notification
no voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g5negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600
dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10
ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode generalswitchport general pvid 1no switchport general acceptable-frame-type tagged-onlyno switchport general ingress-filtering disableswitchport general allowed vlan add 6 tagged
no switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g6negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5
no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno description
garp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2
classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g7
no lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g8negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authentication
port security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g9negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5
classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g10negotiation allmdix auto
classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0
exit!interface ethernet 1/g11negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2
dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsshutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128
no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmt
no lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g12negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60
dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260
ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port securityport security max 100
no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g13negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicast
lacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000
no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3
mtu 1518switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g14negotiation allmdix autostorm-control broadcast level 5
no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbps
no shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0
classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit
!interface ethernet 1/g15negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0
dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfast
spanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notification
no voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g16negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600
ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnel
lldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g17negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1
lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enable
no gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518
switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g18negotiation allmdix autostorm-control broadcast level 5no storm-control broadcast
storm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdown
no descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1
classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!
interface ethernet 1/g19negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0
dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protection
no ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlan
voice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g20negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30
dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300
spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmit
lldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g21negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout long
dot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbid
no gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode general
switchport general pvid 1no switchport general acceptable-frame-type tagged-onlyno switchport general ingress-filtering disableswitchport general allowed vlan add 6 taggedno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g22negotiation all
mdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trust
cos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1
classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enable
vlan priority 0exit!interface ethernet 1/g23negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30
dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsshutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0
spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode trunkswitchport trunk allowed vlan add 6switchport trunk allowed vlan remove 1no switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmit
lldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/g24negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout long
dot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsshutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbid
no gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode access
no switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/xg1negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5
classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/xg2
classofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trust
voice vlan auth enablevlan priority 0exit!interface ethernet 1/xg3negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control autono dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30
dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidno ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disable
spanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protectedno port securityport security max 100no mode dvlan-tunnellldp transmitlldp receive
no lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface ethernet 1/xg4negotiation allmdix autostorm-control broadcast level 5no storm-control broadcaststorm-control multicast level 5no storm-control multicaststorm-control unicast level 5no storm-control unicastlacp port-priority 1lacp timeout longdot1x port-control auto
no dot1x re-authenticationdot1x timeout quiet-period 60dot1x timeout re-authperiod 3600dot1x timeout supp-timeout 30dot1x timeout tx-period 30dot1x timeout server-timeout 30dot1x max-req 2dot1x guest-vlan 0dot1x unauth-vlan 0dot1x max-users 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbid
no ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3mtu 1518switchport mode accessno switchport protected
no port securityport security max 100no mode dvlan-tunnellldp transmitlldp receiveno lldp transmit-tlvno lldp transmit-mgmtno lldp notificationno voice vlanvoice vlan data priority trustvoice vlan auth enablevlan priority 0exit!interface port-channel 1no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20
garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidhashing-mode 3no ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2
classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 2no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enable
no gvrp vlan-creation-forbidno gvrp registration-forbidhashing-mode 3no ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3
switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 3no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidhashing-mode 3
no ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3switchport mode accessno port securityport security max 100
mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 4no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidhashing-mode 3no ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10
ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0
exit!interface port-channel 5no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidhashing-mode 3no ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0
spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 6
no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidhashing-mode 3no ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protection
no ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 7no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbps
no shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidhashing-mode 3no ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0
classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 8no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20
classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 9no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enable
switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 10no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidhashing-mode 3
mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 11no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidhashing-mode 3no ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10
exit!interface port-channel 12no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidhashing-mode 3no ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0
spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 13
no ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 14no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbps
classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 15no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20
classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 16no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enable
switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 17no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidhashing-mode 3
mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 18no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidhashing-mode 3no ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10
exit!interface port-channel 19no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidhashing-mode 3no ip igmp snoopingip igmp snooping host-time-out 260ip igmp snooping leave-time-out 10ip igmp snooping mrouter-time-out 300spanning-tree disablespanning-tree cost 0
spanning-tree port-priority 128no spanning-tree portfastspanning-tree root-protectionno ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 20
no ip dhcp filtering trustclassofservice dot1p-mapping 0 1classofservice dot1p-mapping 1 0classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 21no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbps
classofservice dot1p-mapping 2 0classofservice dot1p-mapping 3 1classofservice dot1p-mapping 4 2classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 22no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20
classofservice dot1p-mapping 5 2classofservice dot1p-mapping 6 3classofservice dot1p-mapping 7 3switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 23no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enable
switchport mode accessno port securityport security max 100mtu 1518no mode dvlan-tunnelvlan priority 0exit!interface port-channel 24no classofservice trustcos-queue min-bandwidth 0 0 0 0 0 0 0traffic-shape 0 kbpsno shutdownno descriptiongarp timer join 20garp timer leave 60garp timer leaveall 1000no gvrp enableno gvrp vlan-creation-forbidno gvrp registration-forbidhashing-mode 3
mtu 1518no mode dvlan-tunnelvlan priority 0exitsnmp-server community public roenable password f04d2d305d7b6c98594ba7e85b6b408e encryptedexit
Mikhail,
I also tested this and see the same results you have. If HTTP authenticated local (instead of radius) with priv-level15, then configure rights are applied. When HTTP authenticating through radius, 'read only'. I have no problem with CLI via radius (Telnet). I have turned in a trouble case with the vendor.
BTW, I'm using FreeRadius with the following user profile:
"admin" Cleartext-password := "admin123"
Cisco-AVPair = "shell:priv-lvl=15"
Hi!
Thank You for reply.
Did they tell you the bug ticket number or any another info?
I am using TACACS, with the same issue: all access in priv-lvl=1. It would be nice to get that fixed.
BTW do not use ssh with 62xx switches. Use telnet instead. 62xx switches can reload right when the SSH connection opens. This includes under firmware 2.2.0.3.
Anybody from Dell wants to add some info?
Do you have release of firmware with bugs fixed for this model?
If you add "Service-Type = Administrative-User" to your user information, administration rights are allowed over HTTP. Heard that the 6200 uses Service -Type vs Cisco-AVPairs.
FreeRadius Example:
"testuser" Cleartext-Password := "testuser" Service-Type = NAS-Prompt-User, Cisco-AVPair = "shell:priv-lvl=1"
"AdminUser" ClearText-Password := "AdminUser" Service-Type = Administrative-User, Cisco-AVPair = "shell:priv-lvl=15"
Thank YOU very much!!!
But I found it works fine only if you give attributes in radius reply package in order Cisco-AVPair = "shell:priv-lvl=15" and after that Service-Type = Administrative-User.
When I changed position of them, the switch accepted my request, but HTTP interface was in read only mode.
Thank You again!