Перед применением шаблона убедитесь, что коммутатор сброшен до заводских настроек.
В тексте конфигурации найдите и замените следующие переменные:
SWITCH_IPADDRESS — IP-адрес управления коммутатором.
SWITCH_NETMASK — Маска подсети (например, 255.255.255.0 или /24).
GATEWAY_IPADDRESS — IP-адрес шлюза по умолчанию.
💡 Совет: Используйте кнопку «Копировать» в правом верхнем углу блока кода, чтобы избежать выделения лишних символов.
Базовый шаблон для коммутаторов Qtech на 10 портов с поддержкой PoE. Включает настройку VLAN для видеокамер, MVR и блокировки.
hostname SWITCHNAME service password-encryption enable password level 15 7 736642764aec48c9b96178cbf8a2368b username mtk privilege 15 password 7 736642764aec48c9b96178cbf8a2368b no username admin clock timezone MSK add 3 0 no ip http server ntp server 192.168.127.250 ntp enable logging 192.168.127.250 level debugging snmp-server enable snmp-server securityip disable snmp-server community ro 7 wFbcsoAfrRQ= mtu 10000 vlan 1-4094 vlan 10 name VIDEOCAM-VLAN exit vlan 4090 name BLOCKED-VLAN exit vlan 4 multicast-vlan name MVR-VLAN exit multicast-vlan group 225.77.22.0 255 multicast-vlan group 225.77.32.0 255 multicast-vlan group 225.77.42.0 127 multicast-vlan group 225.77.255.0 127 multicast-vlan group 224.2.2.2 multicast-vlan group 239.77.65.71 multicast-vlan group 239.77.79.84 multicast-vlan group 239.79.75.78 multicast-vlan group 239.83.77.75 2 multicast-vlan group 239.83.77.78 multicast-vlan group 239.90.89.88 3 no spanning-tree lldp enable storm-control pps loopback-detection control-recovery timeout 60 interface ethernet 1/0/1-6 shutdown no mls qos trust cos mls qos queue algorithm sp storm-control broadcast 80 storm-control multicast 80 storm-control unicast 80 lldp disable switchport mode hybrid switchport hybrid allowed vlan 10 untag switchport hybrid native vlan 10 no spanning-tree loopback-detection specified-vlan 10 loopback-detection control shutdown switchport mac-address dynamic maximum 5 igmp snooping drop query exit interface vlan10 ip address SWITCH_IPADDRESS SWITCH_NETMASK exit ip route 0.0.0.0 0.0.0.0 GATEWAY_IPADDRESS interface ethernet1/0/9 description MGTS_UPLINK media-type copper mls qos trust cos switchport mode hybrid switchport hybrid allowed vlan 10 untag switchport hybrid native vlan 10 switchport hybrid allowed vlan remove 4090 untag no spanning-tree lldp disable exit interface ethernet1/0/10 media-type copper mls qos trust cos switchport mode hybrid switchport hybrid allowed vlan 10 untag switchport hybrid native vlan 10 switchport hybrid allowed vlan remove 4090 untag no spanning-tree lldp enable lldp transmit optional tlv portDesc sysName sysDesc sysCap exit ip igmp snooping ip igmp snooping vlan 4 ip igmp snooping vlan 4 immediately-leave ip igmp snooping vlan 4 mrouter-port interface ethernet 1/0/9 ip igmp snooping vlan 4 mrouter-port interface ethernet 1/0/10 no interface Vlan 1 authentication line console login local exit write
Шаблон для дополнительного коммутатора. Отличается настройкой uplink-портов (ethernet 1/0/9 и 1/0/10) в режиме trunk.
hostname SWITCHNAME service password-encryption enable password level 15 7 736642764aec48c9b96178cbf8a2368b username mtk privilege 15 password 7 736642764aec48c9b96178cbf8a2368b no username admin clock timezone MSK add 3 0 no ip http server ntp server 192.168.127.250 ntp enable logging 192.168.127.250 level debugging snmp-server enable snmp-server securityip disable snmp-server community ro 7 wFbcsoAfrRQ= mtu 10000 vlan 1-4094 vlan 10 name VIDEOCAM-VLAN exit vlan 4090 name BLOCKED-VLAN exit vlan 4 multicast-vlan name MVR-VLAN exit multicast-vlan group 225.77.22.0 255 multicast-vlan group 225.77.32.0 255 multicast-vlan group 225.77.42.0 127 multicast-vlan group 225.77.255.0 127 multicast-vlan group 224.2.2.2 multicast-vlan group 239.77.65.71 multicast-vlan group 239.77.79.84 multicast-vlan group 239.79.75.78 multicast-vlan group 239.83.77.75 2 multicast-vlan group 239.83.77.78 multicast-vlan group 239.90.89.88 3 no spanning-tree lldp enable storm-control pps loopback-detection control-recovery timeout 60 interface ethernet 1/0/1-6 shutdown no mls qos trust cos mls qos queue algorithm sp storm-control broadcast 80 storm-control multicast 80 storm-control unicast 80 lldp disable switchport mode hybrid switchport hybrid allowed vlan 10 untag switchport hybrid native vlan 10 no spanning-tree loopback-detection specified-vlan 10 loopback-detection control shutdown switchport mac-address dynamic maximum 5 igmp snooping drop query exit interface vlan10 ip address SWITCH_IPADDRESS SWITCH_NETMASK exit ip route 0.0.0.0 0.0.0.0 GATEWAY_IPADDRESS interface ethernet1/0/9 description MGTS_UPLINK media-type copper mls qos trust cos switchport mode trunk switchport trunk allowed vlan 10;20 no spanning-tree lldp disable exit interface ethernet1/0/10 media-type copper mls qos trust cos switchport mode trunk switchport trunk allowed vlan 10;20 no spanning-tree lldp enable lldp transmit optional tlv portDesc sysName sysDesc sysCap exit ip igmp snooping ip igmp snooping vlan 4 ip igmp snooping vlan 4 immediately-leave ip igmp snooping vlan 4 mrouter-port interface ethernet 1/0/9 ip igmp snooping vlan 4 mrouter-port interface ethernet 1/0/10 no interface Vlan 1 authentication line console login local exit write
Шаблон для коммутаторов SKS на 16 портов. Включает специфичные настройки MVC, ACL для фильтрации multicast-трафика и отключение PoE на неиспользуемых портах.
enable config ! hostname SWITCHNAME no ip http server system mtu 9216 lldp run ! greeting SKS-16E1-IP-I-16P Gigabit Ethernet Switch greeting Command Line Interface greeting This system is a property of PJSC Rostelecom ! vlan 1-4094 vlan 10 name VIDEOCAM-VLAN vlan 4 name MCAST-VLAN vlan 20 name MGS_LAN-VLAN vlan 4090 name BLOCKED-VLAN exit interface Vlan 10 ip address SWITCH_IPADDRESS SWITCH_NETMASK exit ip route default GATEWAY_IPADDRESS no-bfd no interface Vlan 1 ! mvc-global mvc vlan 4 ! no spanning-tree ! service password-encryption authentication line console login local aaa authentication login default local aaa authentication enable default enable aaa authorization exec default local localauthor mtk exec privilege default 15 exit username mtk password 7 1027533B7F1A276E author-group mtk enable password 7 1027533B7F1A276E level 15 no username guest no username admin ! snmp-server community 0 public RO time-zone MSK 3 0 ntp server 192.168.127.250 logging 192.168.127.250 informational ! ip igmp-snooping vlan 4 ip igmp-snooping vlan 4 immediate-leave ip igmp-snooping vlan 4 mrouter interface g0/17 ip igmp-snooping vlan 4 mrouter interface g0/18 ip igmp-snooping no-send-special-query ip igmp-snooping noflood-igmp-without-mr ip igmp-snooping dlf-drop no ip igmp-snooping querier ! ip access-list standard FILTER permit src-range 225.77.22.0 225.77.22.255 permit src-range 225.77.32.0 225.77.32.255 permit src-range 225.77.42.0 225.77.42.127 permit src-range 225.77.255.0 225.77.255.127 permit 224.2.2.2 permit 239.77.65.71 permit 239.77.79.84 permit 239.79.75.78 permit src-range 239.83.77.75 239.83.77.80 permit src-range 239.90.89.88 239.90.89.90 ! Interface range fastEthernet 0/1-13 switchport mode access switchport pvid 10 storm-control broadcast threshold 64 storm-control multicast threshold 64 no spanning-tree no lldp receive no lldp transmit poe disable keepalive ip igmp-snooping filter FILTER shutdown ! Interface range fastEthernet 0/14-15 description NVR switchport mode trunk switchport trunk vlan-allowed 10,20 storm-control broadcast threshold 64 storm-control multicast threshold 64 no spanning-tree no lldp receive no lldp transmit poe disable keepalive ip igmp-snooping filter FILTER no shutdown ! Interface range fastEthernet 0/16 description MGS_LAN loopback-detection enable switchport mode access switchport pvid 20 storm-control broadcast threshold 64 storm-control multicast threshold 64 no spanning-tree no lldp receive no lldp transmit keepalive poe disable ip igmp-snooping filter FILTER no shutdown ! Interface range gigaEthernet 0/17 medium copper switchport mode access switchport pvid 10 no spanning-tree lldp receive mvc type source no shutdown ! Interface range gigaEthernet 0/18 medium copper switchport mode trunk switchport trunk vlan-allowed 10,20 no spanning-tree lldp receive lldp transmit lldp management-ip SWITCH_IPADDRESS mvc type source no shutdown exit exit write y
Шаблон для дополнительного коммутатора SKS на 16 портов. Отличается настройкой gigaEthernet 0/17 и 0/18 в режиме trunk для агрегации или резервирования.
enable config ! hostname SWITCHNAME no ip http server system mtu 9216 lldp run ! greeting SKS-16E1-IP-I-16P Gigabit Ethernet Switch greeting Command Line Interface greeting This system is a property of PJSC Rostelecom ! vlan 1-4094 vlan 10 name VIDEOCAM-VLAN vlan 4 name MCAST-VLAN vlan 20 name MGS_LAN-VLAN vlan 4090 name BLOCKED-VLAN exit interface Vlan 10 ip address SWITCH_IPADDRESS SWITCH_NETMASK exit ip route default GATEWAY_IPADDRESS no-bfd no interface Vlan 1 ! mvc-global mvc vlan 4 ! no spanning-tree ! service password-encryption authentication line console login local aaa authentication login default local aaa authentication enable default enable aaa authorization exec default local localauthor mtk exec privilege default 15 exit username mtk password 7 1027533B7F1A276E author-group mtk enable password 7 1027533B7F1A276E level 15 no username guest no username admin ! snmp-server community 0 public RO time-zone MSK 3 0 ntp server 192.168.127.250 logging 192.168.127.250 informational ! ip igmp-snooping vlan 4 ip igmp-snooping vlan 4 immediate-leave ip igmp-snooping vlan 4 mrouter interface g0/17 ip igmp-snooping vlan 4 mrouter interface g0/18 ip igmp-snooping no-send-special-query ip igmp-snooping noflood-igmp-without-mr ip igmp-snooping dlf-drop no ip igmp-snooping querier ! ip access-list standard FILTER permit src-range 225.77.22.0 225.77.22.255 permit src-range 225.77.32.0 225.77.32.255 permit src-range 225.77.42.0 225.77.42.127 permit src-range 225.77.255.0 225.77.255.127 permit 224.2.2.2 permit 239.77.65.71 permit 239.77.79.84 permit 239.79.75.78 permit src-range 239.83.77.75 239.83.77.80 permit src-range 239.90.89.88 239.90.89.90 ! Interface range fastEthernet 0/1-13 switchport mode access switchport pvid 10 storm-control broadcast threshold 64 storm-control multicast threshold 64 no spanning-tree no lldp receive no lldp transmit poe disable keepalive ip igmp-snooping filter FILTER shutdown ! Interface range fastEthernet 0/14-15 description NVR switchport mode trunk switchport trunk vlan-allowed 10,20 storm-control broadcast threshold 64 storm-control multicast threshold 64 no spanning-tree no lldp receive no lldp transmit poe disable keepalive ip igmp-snooping filter FILTER no shutdown ! Interface range fastEthernet 0/16 description MGS_LAN loopback-detection enable switchport mode access switchport pvid 20 storm-control broadcast threshold 64 storm-control multicast threshold 64 no spanning-tree no lldp receive no lldp transmit keepalive poe disable ip igmp-snooping filter FILTER no shutdown ! Interface range gigaEthernet 0/17 medium copper switchport mode trunk switchport trunk vlan-allowed 10,20 no spanning-tree lldp receive lldp transmit lldp management-ip SWITCH_IPADDRESS mvc type source no shutdown ! Interface range gigaEthernet 0/18 medium copper switchport mode trunk switchport trunk vlan-allowed 10,20 no spanning-tree lldp receive lldp transmit lldp management-ip SWITCH_IPADDRESS mvc type source no shutdown exit exit write y