sntp server primary address XXX.XXX.XXX.XXX
sntp enable
cli password telnet local
cli password serial local
!
! *** SNMP ***
!
snmp-server contact "XXX"
snmp-server name "XXX.XXX.XXX.XXX" 
snmp-server location "XXX"
snmp-server view allView +1
no snmp-server community rw
no snmp-server community ro
!
! *** IP  ***
!
ip default-gateway XXX.XXX.XXX.XXX
ip address stack 1XXX.XXX.XXX.XXX
!
!
logging remote address XXX.XXX.XXX.XXX
logging remote enable
!
! *** Custom Banner ***
!
banner disabled
!
! *** SSH ***
!
ssh
!
! *** SSL ***
!
ssl
no https-only
!
telnet-access disable
!
! *** LACP (Phase 1) ***
interface Ethernet ALL
lacp mode port ALL off
exit
!
!
vlan create 140 type port
vlan create 4051-4052 type spbm-bvlan
vlan name 1 "XXXXX"
vlan name 140 "XXXXXX"
vlan ports 1/49-50 tagging tagAll filter-untagged-frame enable
vlan ports 2/49-50 tagging tagAll filter-untagged-frame enable
vlan ports 3/49-50 tagging tagAll filter-untagged-frame enable
vlan ports 4/49-50 tagging tagAll filter-untagged-frame enable
vlan configcontrol automatic
vlan members remove 1 ALL
!
! *** SPBM (Phase 1) ***
router isis
spbm 1
spbm 1 b-vid 4051-4052 primary 4051
spbm 1 nick-name 9.5X.XX
spbm 1 multicast enable
manual-area 49.0001
interface Ethernet 1/49-50
interface Ethernet 2/49-50
interface Ethernet 3/49-50
interface Ethernet 4/49-50
isis
isis spbm 1
isis enable
exit
router isis
overload
system-id  00bb.0149.XXXXX
sys-name  "XXXXXXXXX"
exit
!
i-sid 14900001 vlan 1
i-sid 14900140 vlan 140
!
! *** MSTP (Phase 2) ***
!
interface Ethernet ALL
spanning-tree mstp port 1/49-50 learning disable
spanning-tree mstp port 2/49-50 learning disable
spanning-tree mstp port 3/49-50 learning disable
spanning-tree mstp port 4/49-50 learning disable
spanning-tree bpdu-filtering port 49-50 timeout 0
exit
!
! *** L3 ***
!
interface loopback 1
ip address XXX.XXX.XXX.XXX  255.255.255.255
exit
!
! *** SPBM (Phase 2) ***
!
router isis enable
!
! *** DHCP SNOOPING ***
!
ip dhcp-snooping enable
ip dhcp-snooping vlan  140
interface ethernet all
ip dhcp-snooping port 1/1-48 untrusted
ip dhcp-snooping port 2/1-48 untrusted
ip dhcp-snooping port 3/1-48 untrusted
ip dhcp-snooping port 4/1-48 untrusted
ip dhcp-snooping port 1/49-50 trusted
ip dhcp-snooping port 2/49-50 trusted
ip dhcp-snooping port 3/49-50 trusted
ip dhcp-snooping port 4/49-50 trusted
exit
!
!*********bpdu filterring****************
interface ethernet all
spanning-tree mstp port 1/1-48 learning enable
spanning-tree mstp port 2/1-48 learning enable
spanning-tree mstp port 3/1-48 learning enable
spanning-tree mstp port 4/1-48 learning enable
spanning-tree mstp port 1/1-48 edge-port true
spanning-tree mstp port 2/1-48 edge-port true
spanning-tree mstp port 3/1-48 edge-port true
spanning-tree mstp port 4/1-48 edge-port true
spanning-tree bpdu-filtering port 1/1-48 enable
spanning-tree bpdu-filtering port 2/1-48 enable
spanning-tree bpdu-filtering port 3/1-48 enable
spanning-tree bpdu-filtering port 4/1-48 enable
spanning-tree bpdu-filtering timeout 0
exit
!
! *** SLPP-guard ***
!
interface Ethernet ALL
slpp-guard port 1/1-48 enable
slpp-guard port 2/1-48 enable
slpp-guard port 3/1-48 enable
slpp-guard port 4/1-48 enable
exit
!
!
!*******storm control*************
!
interface ethernet all
storm-control all port 1/1-48 high-watermark 1500 action shutdown enable
storm-control all port 2/1-48 high-watermark 1500 action shutdown enable
storm-control all port 3/1-48 high-watermark 1500 action shutdown enable
storm-control all port 4/1-48 high-watermark 1500 action shutdown enable
exit