305 lines
5.0 KiB
INI
Executable File
305 lines
5.0 KiB
INI
Executable File
!
|
|
#system config
|
|
language English
|
|
hostname EdgeGateway
|
|
ip domain-name edgegateway.com.cn
|
|
clock timezone CST6CDT,M3.2.0/2,M11.1.0/2
|
|
service password-encryption
|
|
!
|
|
#log config
|
|
log persistent severity 7
|
|
!
|
|
#user config
|
|
username admin privilege 15 password $1$4uCjyOgw$HNQuju4dv/YWzZ/S7hgbj0
|
|
!
|
|
enable password $1$kvwao0Sc$zzKGmDaqupdkXYaaObwJx/
|
|
!
|
|
#aaa config
|
|
!
|
|
#cron config
|
|
chronos reboot every day 8 5
|
|
remote-login retry 20
|
|
!
|
|
#alarm config
|
|
!
|
|
#loopback config
|
|
interface loopback 1
|
|
ip address 127.0.0.1 255.0.0.0
|
|
!
|
|
!
|
|
#ethernet interface config
|
|
interface fastethernet 0/1
|
|
track l2-state
|
|
!
|
|
interface fastethernet 0/2
|
|
!
|
|
!
|
|
#Ethernet sub interface config
|
|
!
|
|
#cellular config
|
|
cellular 1 gsm profile 1 11166.mcs use-blank-dialno auto
|
|
cellular 1 gsm profile 2 ne01.vzwstatic use-blank-dialno auto
|
|
cellular 1 gsm profile 3 10569.mcs use-blank-dialno auto
|
|
cellular 1 dial interval 10
|
|
cellular 1 signal interval 120
|
|
cellular 1 network auto
|
|
cellular 1 dual-sim enable
|
|
cellular 1 dual-sim main 1
|
|
cellular 1 dual-sim policy redial 5
|
|
cellular 1 sms mode text
|
|
cellular 1 sms interval 30
|
|
!
|
|
interface cellular 1
|
|
dialer profile 1
|
|
dialer profile 2 secondary
|
|
dialer timeout 120
|
|
dialer activate auto
|
|
ip address negotiated
|
|
ip mru 1500
|
|
ip mtu 1500
|
|
ppp ipcp dns request
|
|
ppp keepalive 55 5
|
|
!
|
|
!
|
|
#dot11 config
|
|
interface dot11radio 1
|
|
shutdown
|
|
ip address dhcp
|
|
station-role workgroup-bridge
|
|
radio-type dot11bgn
|
|
client-mode ssid Henry@s#Pump
|
|
client-mode authentication-method wpa 2
|
|
client-mode cipher-suite ccmp key ascii $AES$861CE7AACCECC4CAF7EFD9A308A655E3
|
|
no client-mode default-route
|
|
!
|
|
!
|
|
#bridge config
|
|
!
|
|
bridge 1
|
|
!
|
|
interface bridge 1
|
|
ip address 192.168.1.1 255.255.255.0
|
|
!
|
|
interface fastethernet 0/2
|
|
bridge-group 1
|
|
!
|
|
interface fastethernet 0/1
|
|
bridge-group 1
|
|
!
|
|
!
|
|
!
|
|
#dialer config
|
|
!
|
|
#ipsec config
|
|
crypto ipsec-daemon stop
|
|
!
|
|
#l2tp config
|
|
!
|
|
#openvpn config
|
|
!
|
|
#openvpn server config
|
|
!
|
|
#web config
|
|
ip web-access timeout 300
|
|
ip https access enable
|
|
!
|
|
#device-manager config
|
|
device-manager enable
|
|
device-manager server iot.inhandnetworks.com
|
|
device-manager account nmelone@henry-pump.com
|
|
device-manager location cellular
|
|
!
|
|
#InConnect config
|
|
!
|
|
#Erlang config
|
|
erlang mode off
|
|
!
|
|
#telnet server config
|
|
no ip telnet server
|
|
no ip telnet access enable
|
|
!
|
|
#ssh server config
|
|
!
|
|
#dhcp-relay config
|
|
!
|
|
#dns-relay config
|
|
ip dns-relay server
|
|
!
|
|
#dhcp server config
|
|
interface bridge 1
|
|
ip dhcp-server enable
|
|
ip dhcp-server range 192.168.1.2 192.168.1.254
|
|
ip dhcp-server lease 1440
|
|
!
|
|
!
|
|
#dns config
|
|
!
|
|
#ip host config
|
|
!
|
|
#ddns config
|
|
!
|
|
#snmp config
|
|
|
|
#ovdp config
|
|
!
|
|
!
|
|
|
|
#dockerd config
|
|
!
|
|
|
|
#portainer config
|
|
!
|
|
|
|
#Azure IoT Edge config
|
|
!
|
|
|
|
#AWS IoT Greengrass config
|
|
!
|
|
#ntp server config
|
|
ntp master 2
|
|
ntp server 0.pool.ntp.org
|
|
ntp server 1.pool.ntp.org
|
|
ntp server 2.pool.ntp.org
|
|
ntp server 3.pool.ntp.org
|
|
!
|
|
!
|
|
|
|
#Telegraf config
|
|
!
|
|
#email config
|
|
!
|
|
#sntp client config
|
|
sntp-client
|
|
sntp-client server 0.pool.ntp.org port 123
|
|
sntp-client server 1.pool.ntp.org port 123
|
|
sntp-client server 2.pool.ntp.org port 123
|
|
sntp-client server 3.pool.ntp.org port 123
|
|
!
|
|
#gre config
|
|
!
|
|
#static route config
|
|
ip route 0.0.0.0 0.0.0.0 cellular 1 253
|
|
ip route 0.0.0.0 0.0.0.0 dot11radio 1 250
|
|
!
|
|
#rip config
|
|
!
|
|
!
|
|
#ospf config
|
|
!
|
|
!
|
|
#filtering config
|
|
!
|
|
#bgp config
|
|
!
|
|
!
|
|
#firewall config
|
|
!
|
|
!
|
|
interface cellular 1
|
|
ip access-group 192 admin
|
|
!
|
|
access-list 100 10 permit ip any any
|
|
access-list 101 10 permit ip any any
|
|
access-list 102 10 permit ip any any
|
|
access-list 192 10 permit tcp any any eq 443 log
|
|
access-list 192 20 deny tcp any any eq 80
|
|
access-list 192 30 deny tcp any any eq 23
|
|
access-list 192 40 deny tcp any any eq 22
|
|
access-list 192 50 deny tcp any any eq 53
|
|
access-list 192 60 deny udp any any eq 53
|
|
interface fastethernet 0/1
|
|
ip nat outside
|
|
!
|
|
interface bridge 1
|
|
ip nat inside
|
|
!
|
|
interface cellular 1
|
|
ip nat outside
|
|
!
|
|
!
|
|
ip snat inside list 101 interface fastethernet 0/1
|
|
ip snat inside list 100 interface cellular 1
|
|
ip dnat outside static tcp interface cellular 1 44818 192.168.1.10 44818 description PLC
|
|
ip dnat outside static tcp interface cellular 1 5900 192.168.1.11 5900 description VNC
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
#tcp mss config
|
|
ip tcp adjust-mss 1360
|
|
!
|
|
!
|
|
!
|
|
#netwatcher config
|
|
!
|
|
!
|
|
#sla config
|
|
!
|
|
#track config
|
|
!
|
|
#vrrpd config
|
|
!
|
|
#backup config
|
|
!
|
|
#mroute config
|
|
!
|
|
#cert config
|
|
!
|
|
!
|
|
#cert enroll config
|
|
crypto key generate rsa general-keys modulus 1024
|
|
!
|
|
!
|
|
#dls config
|
|
!
|
|
#gps config
|
|
gps enable
|
|
!
|
|
#gps serial config
|
|
!
|
|
#gps server config
|
|
!
|
|
#gps client config
|
|
!
|
|
#Serial Configuration
|
|
serial 1
|
|
!
|
|
serial 2
|
|
!
|
|
!
|
|
#python config
|
|
python enable
|
|
python log username adm password $AES$BFA541FA10FA3B041CBA4412D12C52B8
|
|
python app 1 on
|
|
python appcmd 1 logsize 1
|
|
|
|
quit
|
|
!
|
|
python app 2 on
|
|
python appcmd 2 logsize 2 5
|
|
device_supervisor
|
|
quit
|
|
!
|
|
!
|
|
#Modbus IO Configuration
|
|
!
|
|
#traffic-stated config
|
|
interface cellular 1
|
|
traffic-stated statistic
|
|
!
|
|
!
|
|
#data-usage config
|
|
data-usage sim1
|
|
daily units MB
|
|
daily limit 35
|
|
monthly units GB
|
|
monthly limit 1
|
|
!
|
|
interface cellular 1
|
|
traffic-stated sim 1 data-usage sim1
|
|
traffic-stated sim 1 daily-action only-report
|
|
traffic-stated sim 1 monthly-action only-report
|
|
traffic-stated sim 1 monitoring
|
|
!
|
|
#end of configuration |