This document contains the configuration of a network device. It configures interfaces, VLANs, SNMP, NTP, and access control lists. Interfaces include Ethernet and EPON ports. VLANs 1 and 10-12, 100, and 111 are defined. NTP and SNMP are enabled for management. Access control lists restrict traffic to the management network and allow DHCP and client traffic.

1. !
!version 10.1.0A build 7449
no service timestamps log
no service timestamps debug
no logging on
logging 192.168.10.4
no logging console
logging facility syslog
no logging monitor
no logging trap
!
!
!
!
!
!
!
!
!
!
!
!
spanning-tree mode rstp
spanning-tree management trap
spanning-tree backbonefast
spanning-tree loopguard default
!
!
!
!
!
ip access-list standard mgmt_acl
permit 192.168.10.2 255.255.255.255
permit 192.168.10.4 255.255.255.255
permit 192.168.10.1 255.255.255.255
permit 192.168.10.5 255.255.255.255
!
ip access-list extended dhcp_acl
remark dhcp_control
permit udp 172.16.0.1 255.255.255.255 eq 67 255.255.255.255 255.255.255.255 eq
68
permit udp 172.16.10.1 255.255.255.255 eq 67 255.255.255.255 255.255.255.255 eq
68
permit udp 172.16.11.1 255.255.255.255 eq 67 255.255.255.255 255.255.255.255 eq
68
permit udp 172.16.12.1 255.255.255.255 eq 67 255.255.255.255 255.255.255.255 eq
68
deny udp any 255.255.255.255 255.255.255.255 eq 68
permit udp any eq 68 255.255.255.255 255.255.255.255 eq 67
remark allow_client_network
permit ip 172.16.0.0 255.255.240.0 any
permit ip any 172.16.0.0 255.255.240.0
remark allow_mgmt_network
permit ip 192.168.10.0 255.255.255.0 192.168.10.4 255.255.255.255
permit ip 192.168.10.4 255.255.255.255 192.168.10.0 255.255.255.0
permit ip 192.168.10.0 255.255.255.0 192.168.10.2 255.255.255.255
permit ip 192.168.10.2 255.255.255.255 192.168.10.0 255.255.255.0
remark deny_all
deny ip any any
!
!

2. !
aaa authentication login default enable local
aaa authentication enable default enable none
!
username chplus
enable password 7 0335103E38524A026D1004 level 15
!
!!slot 0 84
interface GigaEthernet0/1
description "Internet"
switchport mode trunk
switchport trunk vlan-allowed 1,10-12,100,111
storm-control multicast threshold 0
flow-control on
!
interface GigaEthernet0/2
description "SH Management"
switchport trunk vlan-untagged 100
storm-control multicast threshold 0
flow-control on
!
interface GigaEthernet0/3
shutdown
ip access-group dhcp_acl
!
interface GigaEthernet0/4
!
interface GigaEthernet0/5
!
interface GigaEthernet0/6
switchport mode trunk
switchport trunk vlan-allowed 1,10-12,100,111
ip access-group dhcp_acl
flow-control on
!
interface EPON0/1
epon bind-onu fcfa.f796.083e 1
epon bind-onu fcfa.f79a.3780 2
epon bind-onu 00e0.0f01.d402 3
epon bind-onu fcfa.f79a.3778 4
epon bind-onu fcfa.f796.080d 5
epon bind-onu fcfa.f796.080f 6
epon bind-onu fcfa.f796.0695 7
epon bind-onu fcfa.f796.076d 8
switchport mode trunk
switchport trunk vlan-allowed 1,10-12,100
storm-control multicast threshold 1
ip access-group dhcp_acl
!
interface EPON0/1:1
onu-configuration
!!onu-configuration-end
!
interface EPON0/1:2
onu-configuration
!!onu-configuration-end
!
interface EPON0/1:3
onu-configuration
!!onu-configuration-end
!
interface EPON0/1:4

3. onu-configuration
!!onu-configuration-end
!
interface EPON0/1:5
onu-configuration
!!onu-configuration-end
!
interface EPON0/1:6
onu-configuration
!!onu-configuration-end
!
interface EPON0/1:7
onu-configuration
!!onu-configuration-end
!
interface EPON0/1:8
onu-configuration
!!onu-configuration-end
!
interface EPON0/2
!
interface EPON0/3
epon bind-onu fcfa.f79a.3790 1
epon bind-onu fcfa.f796.0800 6
epon bind-onu fcfa.f796.0855 7
epon bind-onu 00e0.0f01.b292 9
switchport mode trunk
switchport trunk vlan-allowed 1,10-12,100
storm-control multicast threshold 1
!
interface EPON0/3:1
onu-configuration
!!onu-configuration-end
!
interface epon0/3:6
onu-configuration
!!onu-configuration-end
!
!
interface EPON0/3:7
onu-configuration
!!onu-configuration-end
!
interface epon0/3:9
onu-configuration
!!onu-configuration-end
!
!
interface EPON0/4
epon bind-onu fcfa.f79a.302d 1
!
interface epon0/4:1
onu-configuration
!!onu-configuration-end
!
!
!!slot end
!
interface VLAN1
ip address 192.168.10.200 255.255.255.0
!

4. !
!
vlan 1,10-12,100,111
!
!
!
!
!
!
!
snmp-server community public RO
snmp-server location OLT
!
!
greeting "good morning"
line vty 0
password 7 0335103e38524a026d1004
!
!
!
time-zone phil 8 0
sntp query-interval 10
sntp server 192.168.10.1 1
!
!