!
no spanning-tree
!
ip access-list extended 100
10 deny ip any 10.0.30.0 0.0.0.255
20 permit ip any any
!
service dhcp
ip dhcp excluded-address 10.0.10.1 10.0.10.20
ip dhcp excluded-address 10.0.20.1 10.0.20.20
ip dhcp excluded-address 10.0.30.1 10.0.30.20
ip dhcp excluded-address 10.0.40.1 10.0.40.20
!
ip dhcp pool pool_server
lease 0 8 0
network 10.0.10.0 255.255.255.0
dns-server 8.8.8.8
default-router 10.0.10.1
!
ip dhcp pool pool_cctv
network 10.0.20.0 255.255.255.0
dns-server 8.8.8.8
default-router 10.0.20.1
!
ip dhcp pool pool_account
lease 0 8 0
network 10.0.30.0 255.255.255.0
dns-server 8.8.8.8
default-router 10.0.30.1
!
ip dhcp pool pool_sale
lease 0 8 0
network 10.0.40.0 255.255.255.0
dns-server 8.8.8.8
default-router 10.0.40.1
!
install 0 XS-S1960-24GT4SFP-H
!
sysmac 8005.88ec.df70
ip name-server 8.8.8.8
!
enable service web-server http
enable service web-server https
!
nfpp
!
no service password-encryption
!
redundancy
!
clock timezone UTC +7 0
!
no zam
!
vlan 10
name Server
!
vlan 20
name CCTV
!
vlan 30
name Account
!
vlan 40
name Sale
!
vlan 1
!
interface GigabitEthernet 0/1
!
interface GigabitEthernet 0/2
!
interface GigabitEthernet 0/3
switchport access vlan 10
!
interface GigabitEthernet 0/4
switchport access vlan 10
!
interface GigabitEthernet 0/5
switchport access vlan 20
!
interface GigabitEthernet 0/6
switchport access vlan 20
!
interface GigabitEthernet 0/7
switchport access vlan 30
!
interface GigabitEthernet 0/8
switchport access vlan 30
!
interface GigabitEthernet 0/9
switchport access vlan 40
!
interface GigabitEthernet 0/10
switchport access vlan 40
!
interface GigabitEthernet 0/11
!
interface GigabitEthernet 0/12
!
interface GigabitEthernet 0/13
!
interface GigabitEthernet 0/14
!
interface GigabitEthernet 0/15
!
interface GigabitEthernet 0/16
!
interface GigabitEthernet 0/17
!
interface GigabitEthernet 0/18
!
interface GigabitEthernet 0/19
!
interface GigabitEthernet 0/20
!
interface GigabitEthernet 0/21
!
interface GigabitEthernet 0/22
!
interface GigabitEthernet 0/23
!
interface GigabitEthernet 0/24
switchport mode trunk
!
interface GigabitEthernet 0/25
!
interface GigabitEthernet 0/26
!
interface GigabitEthernet 0/27
!
interface GigabitEthernet 0/28
!
interface VLAN 1
ip address 192.168.3.243 255.255.255.0
!
interface VLAN 10
ip address 10.0.10.1 255.255.255.0
!
interface VLAN 20
ip address 10.0.20.1 255.255.255.0
!
interface VLAN 30
ip address 10.0.30.1 255.255.255.0
!
interface VLAN 40
ip access-group 100 in
ip address 10.0.40.1 255.255.255.0
!
ntp server time.google.com
ntp server 0.pool.ntp.org
ntp server 1.pool.ntp.org
!
ip route 0.0.0.0 0.0.0.0 192.168.3.1
!
line console 0
line vty 0 4
login
!
end