! *** CORE (Phase 1) ***
!
sntp server primary address XXX.XXX.XXX.XXX
sntp enable
terminal length 0
cli password serial local
cli password telnet local
!
!
snmp-server contact "XXXX"
snmp-server name "XXX.XXX.XXX.XXX"
snmp-server location "XXX"
snmp-server view allView +1
!
! *** IP  ***
!
ip default-gateway XXX.XXX.XXX.XXX
ip address switch XXX.XXX.XXX.XXX
!
! *** IP Manager ***
!
telnet-access disable
!
!
! *** System Logging ***
!
logging remote address XXX.XXX.XXX.XXX
logging remote enable
!
! *** Custom Banner ***
!
banner disabled
!
! *** SSH ***
!
ssh
!
! *** SSL ***
!
ssl
no https-only
!
!
! *** LACP (Phase 1) ***
!
interface Ethernet ALL
lacp mode port ALL off
exit
!
! *** VLAN ***
!
vlan create 140 type port
vlan create 4051-4052 type spbm-bvlan
vlan name 1 "xxxxxx"
vlan name 140 "xxxxxxx"
vlan name 4051 "BVLAN-1"
vlan name 4052 "BVLAN-2"
vlan ports 49-50 tagging tagAll filter-untagged-frame enable 
vlan configcontrol automatic
!
!
! *** SPBM (Phase 1) ***
!
!spbm
router isis
spbm 1
spbm 1 b-vid 4051-4052 primary 4051
spbm 1 nick-name 9.5X.XX
spbm 1 multicast enable
manual-area 49.0001
interface Ethernet 49-50 
isis
isis spbm 1
isis enable
exit
router isis
overload
system-id  00bb.0149.XXXX
sys-name  "XXX.XXX.XXX.XXX"
exit
i-sid 14900001 vlan 1
i-sid 14900140 vlan 140
!
! *** MSTP (Phase 2) ***
!
interface Ethernet ALL
spanning-tree mstp port 49-50 learning disable
spanning-tree mstp port 1-48 edge-port true
spanning-tree bpdu-filtering port 1-48 enable timeout 0
spanning-tree bpdu-filtering port 49-50 timeout 0
exit
!
interface loopback 1
ip address XXX.XXX.XXX.XXX 255.255.255.255
exit
!
!
! *** SPBM (Phase 2) ***
!
router isis enable
!
!
!
! *** DHCP SNOOPING ***
!
ip dhcp-snooping
ip dhcp-snooping vlan 140
interface Ethernet ALL
ip dhcp-snooping port 49-50 trusted
exit
!
! *** SLPP-guard ***
!
interface Ethernet ALL
slpp-guard port 1-48 enable
exit
!