Template port switch

Catalyst:

switchport nonegotiate
switchport port-security maximum 1
switchport port-security aging type inactivity
switchport port-security
storm-control broadcast level 10.00
storm-control multicast level 10.00
storm-control action trap
spanning-tree bpduguard enable
switchport port-security mac-address sticky
switchport port-security violation shutdown
loopdetect ->2960x ko có
exit

 

CBS, SF:

no macro auto sma
port security max 1
port security discard-shutdown
storm-control broadcast level 10
storm-control multicast level 10
spanning-tree bpduguard enable
loopback-detection enable

 

 Ghi log

Catalyst:

conf t
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
service sequence-numbers
logging host 10.8.x.x transport udp port xxxx
ntp server 10.8.x.x
archive
 log config
  logging enable
  logging size 200
  notify syslog contenttype plaintext
  hidekeys
!
login on-failure log
login on-success log
logging userinfo
no logging origin-id hostname
!
ip ssh logging events
no mac address-table notification mac-move
process cpu threshold type total rising 80 interval 5
memory free low-watermark processor 20000
end

 CBS, SF:

sntp server 10.8.x.x
logging host 10.8.x.x port xxxx

No comments:

Post a Comment

Full các trường data có thể lấy từ AD on-prem

Mail Presence PermissionGrants Department ImAddresses Responsibilities AppRoleAssignments ...