D-Link + мультикаст + VLAN - как готовить?

[alsdfg 120]

Здравствуйте, умудренные и прохаванные гуру.

Есть к вам вопрос по Длинку и накручиванию мультикаста на нем.

 

Отдельный мультикаст ВЛАН не используем.

 

Ситуация вот в чем. Есть у нас свичи агрегации DGS-3120-24SC, все с ними в порядке и чудесно но есть нюанс. Когда на свиче присутствует только default VLAN и все необходимые настройки по мультикаст(и свич есть квериер) + сегментация трафика - IPTV поток бежит без сучка, без задоринки.

 

Стоит только завести через него какие-то вланы, отличные от дефолтного - с потоком, на нужном нам влане, начинаются косяки. А именно - картинка в плеере по случайным промежуткам времени замирает и по случайным же промежуткам времени - отмирает. В чем проблем - непонятно.

 

Может кто-то сталкивался с таким, подскажите где у нас руки из жопы.

Спасибо.

Відредаговано 2014-11-14 11:36:51 alsdfg

[loki 86]

конфиг в студию

[alsdfg 120]

  Відновити прихований контент

 

#-------------------------------------------------------------------------------

#                    DGS-3420-26SC Gigabit Ethernet Switch

#                                Configuration

#

#                           Firmware: Build 1.50.018

#           Copyright(C) 2013 D-Link Corporation. All rights reserved.

#-------------------------------------------------------------------------------



# STACK


config stacking force_master_role state disable


# DEVICE


config temperature threshold high 79

config temperature threshold low 11

config temperature trap state enable

config temperature log state enable


# BASIC


# ACCOUNT LIST

# ACCOUNT END

# PASSWORD ENCRYPTION

disable password encryption 

config serial_port auto_logout 10_minutes

enable web 80

enable clipaging

config terminal width 80

disable command logging

enable password_recovery


# DEBUG


debug config state enable

debug config error_reboot enable


# STORM


config traffic control 1 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 2 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 3 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 4 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 5 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 6 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 7 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 8 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 9 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 10 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 11 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 12 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 13 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 14 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 15 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 16 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 17 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 18 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 19 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 20 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 21 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 22 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 23 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 24 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 25 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control 26 broadcast disable multicast disable unicast disable action drop broadcast_threshold 131072 multicast_threshold 131072 unicast_threshold 131072 countdown 0 time_interval 5 

config traffic control auto_recover_time 0

config traffic trap none

config traffic control log state enable


# LOOP_DETECT


disable loopdetect

config loopdetect recover_timer 60 interval 10 mode port-based 

config loopdetect log state enable

config loopdetect ports 1 state disable

config loopdetect ports 2 state disable

config loopdetect ports 3 state disable

config loopdetect ports 4 state disable

config loopdetect ports 5 state disable

config loopdetect ports 6 state disable

config loopdetect ports 7 state disable

config loopdetect ports 8 state disable

config loopdetect ports 9 state disable

config loopdetect ports 10 state disable

config loopdetect ports 11 state disable

config loopdetect ports 12 state disable

config loopdetect ports 13 state disable

config loopdetect ports 14 state disable

config loopdetect ports 15 state disable

config loopdetect ports 16 state disable

config loopdetect ports 17 state disable

config loopdetect ports 18 state disable

config loopdetect ports 19 state disable

config loopdetect ports 20 state disable

config loopdetect ports 21 state disable

config loopdetect ports 22 state disable

config loopdetect ports 23 state disable

config loopdetect ports 24 state disable

config loopdetect ports 25 state disable

config loopdetect ports 26 state disable

config loopdetect trap none


# GM


disable sim

config sim candidate

config sim dp_interval 30

config sim hold_time 100


# GM_H



# MIRROR


disable mirror


# QOS


enable hol_prevention

config 802.1p default_priority 1-26 0

config bandwidth_control 1-26 rx_rate no_limit tx_rate no_limit

config per_queue bandwidth_control ports 1-26 0 min_rate  no_limit  max_rate no_limit

config per_queue bandwidth_control ports 1-26 1 min_rate  no_limit  max_rate no_limit

config per_queue bandwidth_control ports 1-26 2 min_rate  no_limit  max_rate no_limit

config per_queue bandwidth_control ports 1-26 3 min_rate  no_limit  max_rate no_limit

config per_queue bandwidth_control ports 1-26 4 min_rate  no_limit  max_rate no_limit

config per_queue bandwidth_control ports 1-26 5 min_rate  no_limit  max_rate no_limit

config per_queue bandwidth_control ports 1-26 6 min_rate  no_limit  max_rate no_limit

config per_queue bandwidth_control ports 1-26 7 min_rate  no_limit  max_rate no_limit

config scheduling_mechanism ports 1-26 strict

config scheduling ports 1-26 0  weight 1

config scheduling ports 1-26 1  weight 2

config scheduling ports 1-26 2  weight 3

config scheduling ports 1-26 3  weight 4

config scheduling ports 1-26 4  weight 5

config scheduling ports 1-26 5  weight 6

config scheduling ports 1-26 6  weight 7

config scheduling ports 1-26 7  weight 8

config 802.1p user_priority ports 1-26 0  2

config 802.1p user_priority ports 1-26 1  0

config 802.1p user_priority ports 1-26 2  1

config 802.1p user_priority ports 1-26 3  3

config 802.1p user_priority ports 1-26 4  4

config 802.1p user_priority ports 1-26 5  5

config 802.1p user_priority ports 1-26 6  6

config 802.1p user_priority ports 1-26 7  7


# SYSLOG


config log_save_timing on_demand

disable syslog

config system_severity trap information

config system_severity log information


# TRAF-SEGMENTATION


config traffic_segmentation 1-26 forward_list all


# SSL


disable ssl 

enable ssl ciphersuite RSA_with_RC4_128_MD5 

enable ssl ciphersuite RSA_with_3DES_EDE_CBC_SHA 

enable ssl ciphersuite DHE_DSS_with_3DES_EDE_CBC_SHA 

enable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5 

config ssl cachetimeout 600 


# PORT


disable jumbo_frame

config jumbo_frame ports 1-26 state enable

config ports 1-20 speed auto  capability_advertised  1000_full  auto_negotiation remote_fault_advertised disable flow_control disable learning enable state enable mdix auto

config ports 21-24 medium_type copper speed auto  capability_advertised  10_half 10_full 100_half 100_full 1000_full flow_control disable learning enable state enable mdix auto

config ports 21-24 medium_type fiber speed auto  capability_advertised  1000_full  auto_negotiation remote_fault_advertised disable flow_control disable learning enable state enable

config ports 25-26 speed auto   flow_control disable learning enable state enable mdix auto


# EEE


config eee ports 1-26 state disable


# SFLOW



# OAM



# DDM


config ddm trap disable

config ddm log enable

config ddm power_unit mw

config ddm ports 1-26 state enable shutdown none


# MANAGEMENT


enable snmp traps 

enable snmp authenticate_traps 

enable snmp linkchange_traps

disable snmp

config snmp linkchange_traps ports 1-26 enable


# TRAP


config snmp coldstart_traps enable

config snmp warmstart_traps enable

config rmon trap rising_alarm enable

config rmon trap falling_alarm enable


# TR



# PortGroup



# IGMP_MULTICAST_VLAN


config igmp_snooping multicast_vlan forward_unmatched disable

config igmp_snooping multicast_vlan auto_assign_vlan disable


# MLD_MULTICAST_VLAN


config mld_snooping multicast_vlan forward_unmatched disable

config mld_snooping multicast_vlan auto_assign_vlan disable


# VLAN


enable pvid auto_assign

config vlan default delete 1-26

config vlan default advertisement enable

create vlan SegmentA tag 41

config vlan SegmentA add tagged 9

config vlan SegmentA add untagged 22-23 advertisement disable

create vlan SegmentB tag 42

config vlan SegmentB add tagged 9 advertisement disable

create vlan SegmentC tag 44

config vlan SegmentC add tagged 9 advertisement disable

create vlan SegmentD tag 46

config vlan SegmentD add tagged 9 advertisement disable

disable gvrp

disable asymmetric_vlan

disable vlan_trunk

config port_vlan 1-21,24-26 gvrp_state disable ingress_checking enable acceptable_frame admit_all pvid 1

config port_vlan 22-23 gvrp_state disable ingress_checking enable acceptable_frame admit_all pvid 41


# PORT_SECURITY


config port_security system max_learning_addr no_limit

config port_security trap state disable

config port_security log state disable

config port_security ports 1-26 admin_state disable max_learning_addr 32 lock_address_mode deleteonreset


# ACL



#CPU Interface Filter


disable cpu_interface_filtering 


# SUBNETVLAN


config vlan_precedence port 1-26 mac_based_vlan 


# PROTOCOL_VLAN



# PowerSaving


config power_saving mode link_detection enable

config power_saving mode length_detection disable

config power_saving mode hibernation disable

config power_saving mode led disable

config power_saving mode port disable


# LED-CTRL


config led state enable


# QINQ



# manaport


config out_band_ipif  ipaddress 192.168.0.1/24

config out_band_ipif  state enable

config out_band_ipif  gateway 0.0.0.0


# ExternalAlarm


config external_alarm unit 1 channel 1 message External Alarm 1

config external_alarm unit 1 channel 2 message External Alarm 2

config external_alarm unit 2 channel 1 message External Alarm 3

config external_alarm unit 2 channel 2 message External Alarm 4

config external_alarm unit 3 channel 1 message External Alarm 5

config external_alarm unit 3 channel 2 message External Alarm 6

config external_alarm unit 4 channel 1 message External Alarm 7

config external_alarm unit 4 channel 2 message External Alarm 8

config external_alarm unit 5 channel 1 message External Alarm 9

config external_alarm unit 5 channel 2 message External Alarm 10

config external_alarm unit 6 channel 1 message External Alarm 11

config external_alarm unit 6 channel 2 message External Alarm 12

config external_alarm unit 7 channel 1 message External Alarm 13

config external_alarm unit 7 channel 2 message External Alarm 14

config external_alarm unit 8 channel 1 message External Alarm 15

config external_alarm unit 8 channel 2 message External Alarm 16

config external_alarm unit 9 channel 1 message External Alarm 17

config external_alarm unit 9 channel 2 message External Alarm 18

config external_alarm unit 10 channel 1 message External Alarm 19

config external_alarm unit 10 channel 2 message External Alarm 20

config external_alarm unit 11 channel 1 message External Alarm 21

config external_alarm unit 11 channel 2 message External Alarm 22

config external_alarm unit 12 channel 1 message External Alarm 23

config external_alarm unit 12 channel 2 message External Alarm 24


# RSPAN


disable rspan


# 8021X


disable 802.1x

config 802.1x auth_protocol radius_eap

config 802.1x fwd_pdu system disable

config 802.1x max_users 448

config 802.1x authorization attributes radius enable

config 802.1x capability ports 1-26 none

config 802.1x auth_parameter ports 1-26 direction both port_control auto quiet_period 60 tx_period 30 supp_timeout 30 server_timeout 30 max_req 2 reauth_period 3600 enable_reauth disable 

config 802.1x auth_parameter ports 1-26 max_users 16 


# guestvlan



# NLB



# MCFDB



# FDB


config fdb aging_time 300


# ADDRBIND


config address_binding dhcp_snoop max_entry ports 1 limit no_limit

config address_binding dhcp_snoop max_entry ports 2 limit no_limit

config address_binding dhcp_snoop max_entry ports 3 limit no_limit

config address_binding dhcp_snoop max_entry ports 4 limit no_limit

config address_binding dhcp_snoop max_entry ports 5 limit no_limit

config address_binding dhcp_snoop max_entry ports 6 limit no_limit

config address_binding dhcp_snoop max_entry ports 7 limit no_limit

config address_binding dhcp_snoop max_entry ports 8 limit no_limit

config address_binding dhcp_snoop max_entry ports 9 limit no_limit

config address_binding dhcp_snoop max_entry ports 10 limit no_limit

config address_binding dhcp_snoop max_entry ports 11 limit no_limit

config address_binding dhcp_snoop max_entry ports 12 limit no_limit

config address_binding dhcp_snoop max_entry ports 13 limit no_limit

config address_binding dhcp_snoop max_entry ports 14 limit no_limit

config address_binding dhcp_snoop max_entry ports 15 limit no_limit

config address_binding dhcp_snoop max_entry ports 16 limit no_limit

config address_binding dhcp_snoop max_entry ports 17 limit no_limit

config address_binding dhcp_snoop max_entry ports 18 limit no_limit

config address_binding dhcp_snoop max_entry ports 19 limit no_limit

config address_binding dhcp_snoop max_entry ports 20 limit no_limit

config address_binding dhcp_snoop max_entry ports 21 limit no_limit

config address_binding dhcp_snoop max_entry ports 22 limit no_limit

config address_binding dhcp_snoop max_entry ports 23 limit no_limit

config address_binding dhcp_snoop max_entry ports 24 limit no_limit

config address_binding dhcp_snoop max_entry ports 25 limit no_limit

config address_binding dhcp_snoop max_entry ports 26 limit no_limit

disable address_binding dhcp_snoop

disable address_binding trap_log

enable address_binding roaming

config address_binding dhcp_snoop_entry filename /d:/dhcpsnp.cfg autosave enable

disable address_binding dhcp_snoop ipv6

disable address_binding nd_snoop

config address_binding dhcp_snoop max_entry ports 1-26 limit no_limit ipv6

config address_binding nd_snoop ports 1-26 max_entry no_limit


# DHCPV6_SNOOPING



# NetBiosFilter


config filter netbios all state disable

config filter extensive_netbios all state disable


# RADIUS



# DoS


config dos_prevention dos_type land_attack action drop state disable 

config dos_prevention dos_type blat_attack action drop state disable 

config dos_prevention dos_type tcp_null_scan action drop state disable 

config dos_prevention dos_type tcp_xmasscan action drop state disable 

config dos_prevention dos_type tcp_synfin action drop state disable 

config dos_prevention dos_type tcp_syn_srcport_less_1024 action drop state disable 

config dos_prevention dos_type ping_death_attack action drop state disable 

config dos_prevention dos_type tcp_tiny_frag_attack action drop state disable 

config dos_prevention trap disable

config dos_prevention log disable


# ND_SNOOPING



# DhcpServerScreening


config filter dhcp_server ports all state disable

config filter dhcp_server illegal_server_log_suppress_duration 5min

config filter dhcp_server trap disable

config filter dhcp_server log disable


# sRED


config dscp trust all state disable

config dscp map all dscp_dscp 0 to 0 

config dscp map all dscp_dscp 1 to 1 

config dscp map all dscp_dscp 2 to 2 

config dscp map all dscp_dscp 3 to 3 

config dscp map all dscp_dscp 4 to 4 

config dscp map all dscp_dscp 5 to 5 

config dscp map all dscp_dscp 6 to 6 

config dscp map all dscp_dscp 7 to 7 

config dscp map all dscp_dscp 8 to 8 

config dscp map all dscp_dscp 9 to 9 

config dscp map all dscp_dscp 10 to 10 

config dscp map all dscp_dscp 11 to 11 

config dscp map all dscp_dscp 12 to 12 

config dscp map all dscp_dscp 13 to 13 

config dscp map all dscp_dscp 14 to 14 

config dscp map all dscp_dscp 15 to 15 

config dscp map all dscp_dscp 16 to 16 

config dscp map all dscp_dscp 17 to 17 

config dscp map all dscp_dscp 18 to 18 

config dscp map all dscp_dscp 19 to 19 

config dscp map all dscp_dscp 20 to 20 

config dscp map all dscp_dscp 21 to 21 

config dscp map all dscp_dscp 22 to 22 

config dscp map all dscp_dscp 23 to 23 

config dscp map all dscp_dscp 24 to 24 

config dscp map all dscp_dscp 25 to 25 

config dscp map all dscp_dscp 26 to 26 

config dscp map all dscp_dscp 27 to 27 

config dscp map all dscp_dscp 28 to 28 

config dscp map all dscp_dscp 29 to 29 

config dscp map all dscp_dscp 30 to 30 

config dscp map all dscp_dscp 31 to 31 

config dscp map all dscp_dscp 32 to 32 

config dscp map all dscp_dscp 33 to 33 

config dscp map all dscp_dscp 34 to 34 

config dscp map all dscp_dscp 35 to 35 

config dscp map all dscp_dscp 36 to 36 

config dscp map all dscp_dscp 37 to 37 

config dscp map all dscp_dscp 38 to 38 

config dscp map all dscp_dscp 39 to 39 

config dscp map all dscp_dscp 40 to 40 

config dscp map all dscp_dscp 41 to 41 

config dscp map all dscp_dscp 42 to 42 

config dscp map all dscp_dscp 43 to 43 

config dscp map all dscp_dscp 44 to 44 

config dscp map all dscp_dscp 45 to 45 

config dscp map all dscp_dscp 46 to 46 

config dscp map all dscp_dscp 47 to 47 

config dscp map all dscp_dscp 48 to 48 

config dscp map all dscp_dscp 49 to 49 

config dscp map all dscp_dscp 50 to 50 

config dscp map all dscp_dscp 51 to 51 

config dscp map all dscp_dscp 52 to 52 

config dscp map all dscp_dscp 53 to 53 

config dscp map all dscp_dscp 54 to 54 

config dscp map all dscp_dscp 55 to 55 

config dscp map all dscp_dscp 56 to 56 

config dscp map all dscp_dscp 57 to 57 

config dscp map all dscp_dscp 58 to 58 

config dscp map all dscp_dscp 59 to 59 

config dscp map all dscp_dscp 60 to 60 

config dscp map all dscp_dscp 61 to 61 

config dscp map all dscp_dscp 62 to 62 

config dscp map all dscp_dscp 63 to 63 

config dscp map all dscp_priority 0-7 to 0

config dscp map all dscp_priority 8-15 to 1

config dscp map all dscp_priority 16-23 to 2

config dscp map all dscp_priority 24-31 to 3

config dscp map all dscp_priority 32-39 to 4

config dscp map all dscp_priority 40-47 to 5

config dscp map all dscp_priority 48-55 to 6

config dscp map all dscp_priority 56-63 to 7


# FilterIPv6


config filter dhcpv6_server trap disable

config filter dhcpv6_server log enable

config filter icmpv6_ra_all_node trap disable

config filter icmpv6_ra_all_node log enable


# ARPSpoofingPrevention



# WRED


config wred profile default tcp green min_threshold 50 max_threshold 100 max_drop_rate 50

config wred profile default tcp yellow min_threshold 50 max_threshold 100 max_drop_rate 50

config wred profile default tcp red min_threshold 50 max_threshold 100 max_drop_rate 50

config wred profile default non_tcp green min_threshold 50 max_threshold 100 max_drop_rate 50

config wred profile default non_tcp yellow min_threshold 50 max_threshold 100 max_drop_rate 50

config wred profile default non_tcp red min_threshold 50 max_threshold 100 max_drop_rate 50

disable wred

config wred ports 1-26 cos 0 profile default

config wred ports 1-26 cos 0 weight 9

config wred ports 1-26 cos 1 profile default

config wred ports 1-26 cos 1 weight 9

config wred ports 1-26 cos 2 profile default

config wred ports 1-26 cos 2 weight 9

config wred ports 1-26 cos 3 profile default

config wred ports 1-26 cos 3 weight 9

config wred ports 1-26 cos 4 profile default

config wred ports 1-26 cos 4 weight 9

config wred ports 1-26 cos 5 profile default

config wred ports 1-26 cos 5 weight 9

config wred ports 1-26 cos 6 profile default

config wred ports 1-26 cos 6 weight 9

config wred ports 1-26 cos 7 profile default

config wred ports 1-26 cos 7 weight 9


# MAC_ADDRESS_TABLE_NOTIFICATION


disable mac_notification

config mac_notification interval 1 historysize 50

config mac_notification ports 1-26 disable


# STP


 config stp version rstp

 config stp maxage 20 maxhops 20 forwarddelay 15 txholdcount 6 fbpdu disable hellotime 2 nni_bpdu_addr dot1d

 config stp priority 32768 instance_id 0 

 config stp ports 1-26 externalCost auto  edge false p2p auto state enable restricted_role false restricted_tcn false

 config stp mst_ports 1-26 instance_id 0 internalCost auto priority 128

config stp ports 1-26 fbpdu disable

 config stp mst_config_id name C4:A8:1D:C8:D8:00 revision_level 0

 config stp trap new_root enable 

 config stp trap topo_change  enable 

 disable stp


# L2PT


disable l2protocol_tunnel

config l2protocol_tunnel ports all type none


# BPDU_PROTECTION


config bpdu_protection ports 1-26 mode shutdown


# SAFEGUARD_ENGINE


config safeguard_engine state disable utilization rising 30 falling 20 trap_log disable mode fuzzy


# BANNER_PROMP


config command_prompt default

config greeting_message default


# SSH


 config ssh algorithm 3DES enable

 config ssh algorithm AES128 enable

 config ssh algorithm AES192 enable

 config ssh algorithm AES256 enable

 config ssh algorithm arcfour enable

 config ssh algorithm blowfish enable

 config ssh algorithm cast128 enable

 config ssh algorithm twofish128 enable

 config ssh algorithm twofish192 enable

 config ssh algorithm twofish256 enable

 config ssh algorithm MD5 enable

 config ssh algorithm SHA1 enable

 config ssh algorithm RSA enable

 config ssh algorithm DSA enable

 config ssh authmode password enable

 config ssh authmode publickey enable

 config ssh authmode hostbased enable

 config ssh server maxsession 8

 config ssh server contimeout 120

 config ssh server authfail 2

 config ssh server rekey never

 config ssh server port 22

 config ssh publickey bypass_login_screen state disable

 disable ssh


# SFTPS


 config sftp server timeout 120

 disable sftp server


# SERVER_PROFILE



# TELNETS


enable telnet 23


# DNSRESOLVER


disable dns_resolver

config name_server timeout 3

config name_server timeout 3


# BCPING


enable broadcast_ping_reply


# SMTP


disable smtp

config smtp server_port 25


# SNTP


disable sntp

config time_zone operator + hour 0 min 0

config sntp poll-interval 720

config dst disable


# MULTICAST_FILTER


create mcast_filter_profile profile_id 1 profile_name tv

config mcast_filter_profile profile_id 1 add 233.252.8.0-233.252.8.255

config limited_multicast_addr ports 1 add profile_id 1

config limited_multicast_addr ports 2 add profile_id 1

config limited_multicast_addr ports 3 add profile_id 1

config limited_multicast_addr ports 4 add profile_id 1

config limited_multicast_addr ports 5 add profile_id 1

config limited_multicast_addr ports 6 add profile_id 1

config limited_multicast_addr ports 7 add profile_id 1

config limited_multicast_addr ports 8 add profile_id 1

config limited_multicast_addr ports 9 add profile_id 1

config limited_multicast_addr ports 10 add profile_id 1

config limited_multicast_addr ports 11 add profile_id 1

config limited_multicast_addr ports 12 add profile_id 1

config limited_multicast_addr ports 13 add profile_id 1

config limited_multicast_addr ports 14 add profile_id 1

config limited_multicast_addr ports 15 add profile_id 1

config limited_multicast_addr ports 16 add profile_id 1

config limited_multicast_addr ports 17 add profile_id 1

config limited_multicast_addr ports 18 add profile_id 1

config limited_multicast_addr ports 19 add profile_id 1

config limited_multicast_addr ports 20 add profile_id 1

config limited_multicast_addr ports 21 add profile_id 1

config limited_multicast_addr ports 22 add profile_id 1

config limited_multicast_addr ports 23 add profile_id 1

config limited_multicast_addr ports 24 add profile_id 1

config limited_multicast_addr ports 25 add profile_id 1

config limited_multicast_addr ports 26 add profile_id 1


# LACP


config link_aggregation algorithm mac_source

config lacp_port 1-26 mode passive


# IP


config ipif_mac_mapping ipif System mac_offset 0

config ipif System ipaddress 10.62.41.166/24 vlan SegmentA

config ipif System dhcpv6_client disable

config ipif System dhcpv6_client_pd disable

config ipif System proxy_arp disable local disable

config ipif System ip_mtu 1500

config ipif System  ip_directed_broadcast  disable

config ipif System dhcp_option12 state disable

disable autoconfig 


# DHCPv6_SERVER


disable dhcpv6_server

config dhcpv6_server ipif System state enable


# SNMPv3


delete snmp community public

delete snmp community private

delete snmp user initial

delete snmp group initial

delete snmp view restricted all

delete snmp view CommunityView all

config snmp engineID 800000ab03c4a81dc8d800

create snmp view restricted 1.3.6.1.2.1.1 view_type included

create snmp view restricted 1.3.6.1.2.1.11 view_type included

create snmp view restricted 1.3.6.1.6.3.10.2.1 view_type included

create snmp view restricted 1.3.6.1.6.3.11.2.1 view_type included

create snmp view restricted 1.3.6.1.6.3.15.1.1 view_type included

create snmp view CommunityView 1 view_type included

create snmp view CommunityView 1.3.6.1.6.3 view_type excluded

create snmp view CommunityView 1.3.6.1.6.3.1 view_type included

create snmp group public v1 read_view CommunityView notify_view CommunityView 

create snmp group public v2c read_view CommunityView notify_view CommunityView 

create snmp group initial v3  noauth_nopriv read_view restricted notify_view restricted 

create snmp group private v1 read_view CommunityView write_view CommunityView notify_view CommunityView 

create snmp group private v2c read_view CommunityView write_view CommunityView notify_view CommunityView 

create snmp community private view CommunityView read_write

create snmp community public view CommunityView read_only

create snmp user initial initial 

disable community_encryption

disable snmp response_broadcast_reques


# ip_tunnel



# VOICEVLAN



# staticREP



# ERPS


 disable erps

 config erps log disable 

 config erps trap disable 


# IGMP_PROXY


config igmp_proxy upstream_if vlan vlanid 1 

config igmp_proxy upstream_if source_ip 0.0.0.0

config igmp_proxy upstream_if unsolicited_report_interval 10


# MLD_PROXY


config mld_proxy upstream_if vlan vlanid 1 

config mld_proxy upstream_if source_ip ::

config mld_proxy upstream_if unsolicited_report_interval 10


# UDP_HELPER


disable udp_helper


# CFM



# JWAC


config jwac switch_http_port 80

config jwac clear_quarantine_server_url

config jwac radius_protocol pap

disable jwac quarantine_server_monitor

config jwac quarantine_server_error_timeout 30

enable jwac forcible_logout

enable jwac udp_filtering

enable jwac redirect

config jwac redirect destination quarantine_server delay_time 1

disable jwac

config jwac authenticate_page english

config jwac authorization attributes radius enable

config jwac authorization attributes local enable

config jwac ports 1-26 max_authenticating_host 100 aging_time 1440 idle_time infinite block_time 60


# WAC


 config wac switch_http_port 80

 config wac method local

 config wac authorization attributes local enable

 config wac authorization attributes radius enable

 disable wac

 config wac authentication_page element login_window_title Authentication Login

 config wac authentication_page element user_name_title User Name

 config wac authentication_page element password_title Password

 config wac authentication_page element logout_window_title Logout From The Network

 config wac ports 1-26 aging_time 1440 idle_time infinite block_time 60


# LLDP


disable lldp

config lldp message_tx_interval 30

config lldp tx_delay 2

config lldp message_tx_hold_multiplier 4

config lldp reinit_delay 2

config lldp notification_interval 5

config lldp ports 1-26 notification disable

config lldp ports 1-26 admin_status tx_and_rx


# TELNETC



# TFTPC



# MAC-based_Access_Control


disable mac_based_access_control

config mac_based_access_control authorization attributes radius enable local enable

config mac_based_access_control ports 1-26 state disable

config mac_based_access_control ports  1 max_users 1024

config mac_based_access_control ports  1 aging_time 1440

config mac_based_access_control ports  1 block_time 300

config mac_based_access_control ports  2 max_users 1024

config mac_based_access_control ports  2 aging_time 1440

config mac_based_access_control ports  2 block_time 300

config mac_based_access_control ports  3 max_users 1024

config mac_based_access_control ports  3 aging_time 1440

config mac_based_access_control ports  3 block_time 300

config mac_based_access_control ports  4 max_users 1024

config mac_based_access_control ports  4 aging_time 1440

config mac_based_access_control ports  4 block_time 300

config mac_based_access_control ports  5 max_users 1024

config mac_based_access_control ports  5 aging_time 1440

config mac_based_access_control ports  5 block_time 300

config mac_based_access_control ports  6 max_users 1024

config mac_based_access_control ports  6 aging_time 1440

config mac_based_access_control ports  6 block_time 300

config mac_based_access_control ports  7 max_users 1024

config mac_based_access_control ports  7 aging_time 1440

config mac_based_access_control ports  7 block_time 300

config mac_based_access_control ports  8 max_users 1024

config mac_based_access_control ports  8 aging_time 1440

config mac_based_access_control ports  8 block_time 300

config mac_based_access_control ports  9 max_users 1024

config mac_based_access_control ports  9 aging_time 1440

config mac_based_access_control ports  9 block_time 300

config mac_based_access_control ports  10 max_users 1024

config mac_based_access_control ports  10 aging_time 1440

config mac_based_access_control ports  10 block_time 300

config mac_based_access_control ports  11 max_users 1024

config mac_based_access_control ports  11 aging_time 1440

config mac_based_access_control ports  11 block_time 300

config mac_based_access_control ports  12 max_users 1024

config mac_based_access_control ports  12 aging_time 1440

config mac_based_access_control ports  12 block_time 300

config mac_based_access_control ports  13 max_users 1024

config mac_based_access_control ports  13 aging_time 1440

config mac_based_access_control ports  13 block_time 300

config mac_based_access_control ports  14 max_users 1024

config mac_based_access_control ports  14 aging_time 1440

config mac_based_access_control ports  14 block_time 300

config mac_based_access_control ports  15 max_users 1024

config mac_based_access_control ports  15 aging_time 1440

config mac_based_access_control ports  15 block_time 300

config mac_based_access_control ports  16 max_users 1024

config mac_based_access_control ports  16 aging_time 1440

config mac_based_access_control ports  16 block_time 300

config mac_based_access_control ports  17 max_users 1024

config mac_based_access_control ports  17 aging_time 1440

config mac_based_access_control ports  17 block_time 300

config mac_based_access_control ports  18 max_users 1024

config mac_based_access_control ports  18 aging_time 1440

config mac_based_access_control ports  18 block_time 300

config mac_based_access_control ports  19 max_users 1024

config mac_based_access_control ports  19 aging_time 1440

config mac_based_access_control ports  19 block_time 300

config mac_based_access_control ports  20 max_users 1024

config mac_based_access_control ports  20 aging_time 1440

config mac_based_access_control ports  20 block_time 300

config mac_based_access_control ports  21 max_users 1024

config mac_based_access_control ports  21 aging_time 1440

config mac_based_access_control ports  21 block_time 300

config mac_based_access_control ports  22 max_users 1024

config mac_based_access_control ports  22 aging_time 1440

config mac_based_access_control ports  22 block_time 300

config mac_based_access_control ports  23 max_users 1024

config mac_based_access_control ports  23 aging_time 1440

config mac_based_access_control ports  23 block_time 300

config mac_based_access_control ports  24 max_users 1024

config mac_based_access_control ports  24 aging_time 1440

config mac_based_access_control ports  24 block_time 300

config mac_based_access_control ports  25 max_users 1024

config mac_based_access_control ports  25 aging_time 1440

config mac_based_access_control ports  25 block_time 300

config mac_based_access_control ports  26 max_users 1024

config mac_based_access_control ports  26 aging_time 1440

config mac_based_access_control ports  26 block_time 300

config mac_based_access_control method local

config mac_based_access_control password default

config mac_based_access_control password_type manual_string

config mac_based_access_control max_users no_limit

config mac_based_access_control trap state enable

config mac_based_access_control log state enable


# MCFILTER


config multicast vlan_filtering_mode vlanid 1 filter_unregistered_groups

config multicast vlan_filtering_mode vlanid 41 filter_unregistered_groups


# COMPOUND_AUTHENTICATION


 config authentication ports 1-26 auth_mode host_based

 config authentication ports 1-26 multi_authen_methods none

 enable authorization attributes

 config authentication server failover block

 config authentication mac_format case uppercase

 config authentication mac_format delimiter none

 config authentication mac_format delimiter number 5


# LLDP-MED


config lldp_med fast_start repeat_count 4

config lldp_med log state disable

config lldp_med notification topo_change ports 1 state disable

config lldp_med notification topo_change ports 2 state disable

config lldp_med notification topo_change ports 3 state disable

config lldp_med notification topo_change ports 4 state disable

config lldp_med notification topo_change ports 5 state disable

config lldp_med notification topo_change ports 6 state disable

config lldp_med notification topo_change ports 7 state disable

config lldp_med notification topo_change ports 8 state disable

config lldp_med notification topo_change ports 9 state disable

config lldp_med notification topo_change ports 10 state disable

config lldp_med notification topo_change ports 11 state disable

config lldp_med notification topo_change ports 12 state disable

config lldp_med notification topo_change ports 13 state disable

config lldp_med notification topo_change ports 14 state disable

config lldp_med notification topo_change ports 15 state disable

config lldp_med notification topo_change ports 16 state disable

config lldp_med notification topo_change ports 17 state disable

config lldp_med notification topo_change ports 18 state disable

config lldp_med notification topo_change ports 19 state disable

config lldp_med notification topo_change ports 20 state disable

config lldp_med notification topo_change ports 21 state disable

config lldp_med notification topo_change ports 22 state disable

config lldp_med notification topo_change ports 23 state disable

config lldp_med notification topo_change ports 24 state disable

config lldp_med notification topo_change ports 25 state disable

config lldp_med notification topo_change ports 26 state disable


# IGMP_SNOOPING


enable igmp_snooping

config igmp_snooping data_driven_learning max_learned_entry 120

config igmp_snooping vlan_name SegmentA fast_leave disable proxy_reporting state disable source_ip 0.0.0.0 state enable 

config igmp_snooping querier vlan_name SegmentA query_interval 125 max_response_time 10 robustness_variable 2 last_member_query_interval 1 state enable version 3

config router_ports SegmentA add 9

config router_ports_forbidden SegmentA add 22-23

config igmp_snooping data_driven_learning vlan_name SegmentA state disable aged_out disable expiry_time 260 


# MLDSNP


config mld_snooping data_driven_learning max_learned_entry 120


# ACCESS_AUTHENTICATION_CONTROL


config authen_login default method  local

config authen_enable default method  local_enable

config accounting default method  none

config authen application console login default

config authen application console enable default

config authen application telnet login default

config authen application telnet enable default

config authen application ssh login default

config authen application ssh enable default

config authen application http login default

config authen application http enable default

disable aaa_server_password_encryption

disable authen_policy

config authen parameter response_timeout 30

config authen parameter attempt 3

config admin local_enable




config accounting service network state disable

config accounting service shell state disable

config accounting service system state disable

config accounting service command administrator none

config accounting service command operator none

config accounting service command power_user none

config accounting service command user none

config radius source_ipif none

config tacacs source_ipif none


# DHCP_LOCAL_RELAY


disable dhcp_local_relay


# PTP


disable ptp

config ptp mode e2e_transparent

config ptp transport protocol udp

config ptp boundary priority1 128 priority2 128

config ptp clock domain_number 0 unit 1

config ptp ports 1-26 state disable

config ptp boundary ports 1-26 sync_interval 1

config ptp boundary ports 1-26 delay_mechanism e2e

config ptp boundary ports 1-26 announce  interval 2 delay_req_interval 0 pdelay_req_interval 1 

config ptp boundary ports 1-26 announce timeout 3

config ptp p2p_transparent ports 1-26 pdelay_req_interval 1


# AAA_LOCAL_ENABLE_PASSWORD


# AAA ADMIN PWD LIST

config admin local_enable




# AAA ADMIN PWD END


# DHCP_RELAY


disable dhcp_relay

config dhcp_relay hops 4 time 0 

config dhcp_relay option_82 state disable

config dhcp_relay option_82 check disable

config dhcp_relay option_82 policy replace

config dhcp_relay option_82 remote_id default

config dhcp_relay option_60 state disable

config dhcp_relay option_61 state disable

config dhcp_relay option_60 default mode drop

config dhcp_relay option_61 default drop

config dhcp_relay ports 1-26 state enable


# RIPng


disable ripng

config ripng method split_horizon

config ripng update 30

config ripng expire 180

config ripng garbage_collection 120


# NDP


config ipv6 nd ns ipif System retrans_time 0

config ipv6 nd ra ipif System state disable life_time 1800 reachable_time 1200000 retrans_time 0 hop_limit 64 managed_flag disable other_config_flag disable min_rtr_adv_interval 198 max_rtr_adv_interval 600


# ARP


config arp_aging time 20

config gratuitous_arp send ipif_status_up disable

config gratuitous_arp send dup_ip_detected disable

config gratuitous_arp learning disable


# SNP_AUTH



# DNSR


disable dnsr

config dnsr primary nameserver 0.0.0.0

config dnsr secondary nameserver 0.0.0.0

disable dnsr cache

disable dnsr static


# VRRP


config vrrp ipif System authtype none

disable vrrp


disable vrrp ping



# PROUTE



# ROUTE


config route preference static 60

config route preference rip 100

config route preference default 1

create iproute default 10.62.41.1 1 primary


# RIP


disable rip

config rip timers update 30 timeout 180 garbage_collection 120

config rip ipif System tx_mode disable state disable

config rip ipif System rx_mode disable state disable 


# DHCP_SERVER


disable dhcp class

config dhcp ping_packets 2 

config dhcp ping_timeout 100 

disable dhcp_server


# RELAY6


config dhcpv6_relay hop_count  4 

disable dhcpv6_relay 

config dhcpv6_relay ipif System state enable


#-------------------------------------------------------------------

#             End of configuration file for DGS-3420-26SC

#------------------------------------------------------------------- 

10.62.41.166.txtОтримання інформації

[revomix 28]

картинка наверное не зависает, а пропадает multicast поток, у нас такой же длинк имеется, и проблема думаю такая же, если несколько человек смотрят одну и туже групу, и потом кто то из них покидает ету групу, то длинк пропускает запрос leave к вышестоящему коммутатору, который и вырубает эту групу. Т.П. длинка толком помочь не могут, кажется они сами не вкурсе как должно работать, пока мучаемся с настройками, пробуем крутить настройки и тайминги.

[alsdfg 120]

  В 14.11.2014 в 14:07, revomix сказав:

картинка наверное не зависает, а пропадает multicast поток, у нас такой же длинк имеется, и проблема думаю такая же, если несколько человек смотрят одну и туже групу, и потом кто то из них покидает ету групу, то длинк пропускает запрос leave к вышестоящему коммутатору, который и вырубает эту групу. Т.П. длинка толком помочь не могут, кажется они сами не вкурсе как должно работать, пока мучаемся с настройками, пробуем крутить настройки и тайминги.

Не нифига не так)

Мы собрали тестовый стенд с этим свичем.

При default влане - все норм и зашибись.

При указанном конфиге, смотрю одновременно с ноута и компа(нигде не преостанавливаю, просто смотрю и жду) - залипает.

 

Ключевой факт - при default влане пашет и не жужжит, при других настройках - обрывается.

[revomix 28]

ясно, у нас куча vlan там бегает, для мультикаста тоже отдельный vlan, hw: a2 fw: 1.00.24 и еще такой hw: b1 fw: 1.50.018

P.S. Т.П. длинков ответили что на этих коммутаторах IGMP snooping не поддерживается   а тут http://www.dlink.ru/ua/products/1/1365_b.html пишут что поддерживается.

Відредаговано 2014-11-14 15:59:30 revomix

[alsdfg 120]

  В 14.11.2014 в 15:56, revomix сказав:

ясно, у нас куча vlan там бегает, для мультикаста тоже отдельный vlan, hw: a2 fw: 1.00.24 и еще такой hw: b1 fw: 1.50.018

P.S. Т.П. длинков ответили что на этих коммутаторах IGMP snooping не поддерживается   а тут http://www.dlink.ru/ua/products/1/1365_b.html пишут что поддерживается.

В том то и заморочка что у нас без мультикаст влана(

[Zolks 24]

  Цитата

Firmware: Build 1.50.018

обновите прошивку в первую очередь. Совсем она старая у вас.

 

Прошивки тут: http://forum.dlink.ru/viewtopic.php?f=2&t=92700

 

При прошивке не ошибитесь версиями hw

Відредаговано 2014-11-14 22:36:47 Zolks

[alsdfg 120]

  В 14.11.2014 в 22:33, Zolks сказав:

 

  Цитата

Firmware: Build 1.50.018

обновите прошивку в первую очередь. Совсем она старая у вас.

 

Прошивки тут: http://forum.dlink.ru/viewtopic.php?f=2&t=92700

 

При прошивке не ошибитесь версиями hw

Попробуем, по факту отпишусь.

[Zolks 24]

только досмотрелся.... в шапке вы пишите что у вас DGS-3120-24SC, а в конфиге:

DGS-3420-26SC Gigabit Ethernet Switch

[alsdfg 120]

  В 16.11.2014 в 03:36, Zolks сказав:

только досмотрелся.... в шапке вы пишите что у вас DGS-3120-24SC, а в конфиге:

 

DGS-3420-26SC Gigabit Ethernet Switch

Пардон за мисматч(

Но от этого не многое зависит и я сейчас объясню почему)

На узловой точке у нас стоит DGS-3120-24SC, прошивка там 2.5 и те же глюки.

На прошлой неделе к нам приехал DGS-3420-26SC и пока мы его не приткнули - решили собрать на нем тестовый стенд чтобы забороть глюк.

[alsdfg 120]

Обновили прошивку до последней.

Та же петрушка.

Есть еще мнения от знатоков?

[voxlv 0]

А как у вас мультикаст трафик маршрутеризируется. PIM или еще что-то?

[umbrella 0]

На свичах что стоят на узлах, отключите fast leave да и вообще IGMP и все что с ним связано, на клиенских свичах настройте ISM VLAN, если отдельный влан для мультикаста не используется, то влючите IGMP Snooping, на верхушке можете настроить pim как указано в этой статье http://ixnfo.com/nastroyka-pim-na-kommutatorah-d-link.html

А вообще IPTV лучше подавать отлельным vlan!

Відредаговано 2014-12-04 18:22:04 umbrella

[alsdfg 120]

  В 04.12.2014 в 18:21, umbrella сказав:

На свичах что стоят на узлах, отключите fast leave да и вообще IGMP и все что с ним связано, на клиенских свичах настройте ISM VLAN, если отдельный влан для мультикаста не используется, то влючите IGMP Snooping, на верхушке можете настроить pim как указано в этой статье http://ixnfo.com/nastroyka-pim-na-kommutatorah-d-link.html

А вообще IPTV лучше подавать отлельным vlan!

 

Принято, будем крутить, спасибо!

Відредаговано 2014-12-04 19:36:48 alsdfg

[ikoko 0]

Здравствуйте, такая же проблема , решили ?

[blackjack 250]

Отдельным вланом не вопрос, клиентский порт тегировать получается надо и в клиента на роутере ван порт тоже. Правильно я понимаю?

 

Вариант с двумя витухами или волокнами не рассматривается))))

[alsdfg 120]

  В 22.12.2015 в 22:21, ikoko сказав:

Здравствуйте, такая же проблема , решили ?

Да, заменили ядро на циску)