dlink 1520

• console : логин - admin , пароль - admin по умолчанию.
• web : логин - admin , пароль - admin , ip address switch- 10.90.90.90/8 по умолчанию.
• telnet : логин - admin , пароль - admin , ip address switch - 10.90.90.90/8 по умолчанию.

1. Подключаем console кабель
2. Включаем программу Putty :
   • выбираем Serial
   • COM port
   • Speed 115200
3. Включаем коммутатор
4. переходим в конфигурационный режим:

   •  conf t 

5. Настройка локального пользователя

   •  username admin password 0 admindlink
      username admin privilege 15 

6. Настройка AAA и RADIUS

   •  aaa new-model
      radius-server host 10.0.200.160 key keydlink
      radius-server host 10.1.200.160 key keydlink
      aaa authentication login RADIUS group radius local 
      aaa accounting exec RADIUS start-stop group radius 
      aaa accounting commands 15 RADIUS none 
      aaa accounting network default start-stop group radius 
      aaa accounting system default start-stop group radius 
      ip http accounting exec RADIUS 

7. Настройка ACL

   • ip access-list HTTPS-ACL 5
      10 permit 10.0.10.0 0.0.0.255 10.0.200.0 255.255.255.0
      20 permit 10.0.200.0 0.0.0.255 10.0.200.0 255.255.255.0
      30 permit 10.1.200.0 0.0.0.255 10.0.200.0 255.255.255.0
      40 permit 10.1.10.0 0.0.0.127 10.0.200.0 255.255.255.0
      50 permit 192.168.10.161 0.0.0.0 10.0.200.0 255.255.255.0
      60 permit any any
     ip access-list HTTP-ACL 4
      60 permit 10.0.10.0 0.0.0.255 any
      80 permit 10.0.200.0 0.0.0.255 any
      90 permit 10.1.200.0 0.0.0.255 any
      100 permit 10.1.10.0 0.0.0.127 any
      110 permit 192.168.10.161 0.0.0.0 any
      120 permit 10.0.13.0 0.0.0.127 any
     ip access-list ICMP 3
      10 permit 10.0.200.0 0.0.0.255 10.0.200.0 255.255.255.0
      20 permit 10.1.200.0 0.0.0.255 10.0.200.0 255.255.255.0
      30 permit 10.1.10.0 0.0.0.127 10.0.200.0 255.255.255.0
      40 permit 192.168.10.161 0.0.0.0 10.0.200.0 255.255.255.0
      60 permit 10.0.10.0 0.0.0.255 10.0.200.0 255.255.255.0
     ip access-list SSH-ACL 2
      10 permit 10.0.10.0 0.0.0.255 10.0.200.0 255.255.255.0
      20 permit 10.0.200.0 0.0.0.255 10.0.200.0 255.255.255.0
      30 permit 10.1.200.0 0.0.0.255 10.0.200.0 255.255.255.0
      40 permit 10.1.10.0 0.0.0.127 10.0.200.0 255.255.255.0
      50 permit 192.168.10.161 0.0.0.0 10.0.200.0 255.255.255.0
     ip access-list Telnet-ACL 1
      70 permit 10.0.10.0 0.0.0.255 10.0.200.0 255.255.255.0
      80 permit 10.0.200.0 0.0.0.255 10.0.200.0 255.255.255.0
      90 permit 10.1.200.0 0.0.0.255 10.0.200.0 255.255.255.0
      100 permit 10.1.10.0 0.0.0.127 10.0.200.0 255.255.255.0
      110 permit 192.168.10.161 0.0.0.0 10.0.200.0 255.255.255.0 

8. Настройка подключения к коммутатору

   • ip http timeout-policy idle 600
     ip http access-class HTTP-ACL 
     ip https access-class HTTPS-ACL 
     line telnet
      access-class Telnet-ACL
      accounting exec RADIUS
      login authentication RADIUS
     line ssh
      access-class SSH-ACL
      login authentication RADIUS

9. Вводим пароль для enable режима

   • enable password level 15 0 radius

10. Настраеваем время

    • clock timezone + 5 0
      sntp enable
      sntp server 10.0.200.160
      sntp server 10.1.200.160

11. DHCP Relay

    • ip dhcp relay information option
      ip dhcp relay information trust-all
      ip dhcp smart-relay
      ip dhcp relay information policy keep
      ip dhcp pool clients
       relay source 10.0.13.253 255.255.255.128
       relay destination 192.168.10.161

12. Создаём vlan'ы

    • vlan 16
       name clients
      vlan 100
       name video
      vlan 200
       name hw

13. Создаём интерфейсы

    • interface Vlan1
      no ip address 10.90.90.90 255.0.0.0
      interface Vlan16
       ip address 10.0.13.253 255.255.255.128
       ip dhcp relay information trusted
       ip dhcp relay information policy-action keep
      interface Vlan100
      interface Vlan200
       ip address 10.0.200.26 255.255.255.0

14. Создаём агрегацию канала

    • interface port-channel 26
       switchport mode trunk
       switchport trunk allowed vlan 1,16,100,200
      interface ethernet 1/0/51
       channel-group 26 mode active
       switchport mode trunk
       switchport trunk allowed vlan 1,16,100,200
      interface ethernet 1/0/52
       channel-group 26 mode active
       switchport mode trunk
       switchport trunk allowed vlan 1,16,100,200

15. Добавляем Vlan'ы на интерфейсы

    • interface ethernet 1/0/1
       switchport mode access
       switchport access vlan 100
      interface range ethernet 1/0/2-48
       switchport mode access
       switchport access vlan 16
      interface ethernet 1/0/49
       switchport mode trunk
      interface ethernet 1/0/50
       switchport mode trunk

copy running-config tftp