Explain the following configuration of Huawei AR6280 Router line by line in detail:
#
sysname pokhara-CR-AR6280-01
#
board add 0/3 4ES2G-S
board add 0/4 4ES2G-S
#
drop illegal-mac alarm
#
clock timezone Asia/Kathmandu add 05:45:00
#
ipv6
#
vlan batch 2 to 2000
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name dot1xmac_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name multi_authen_profile
authentication-profile name portal_authen_profile
#
lldp enable
#
dhcp enable
#
ecc peer-public-key 10.0.1.4 encoding-type der
public-key-code begin
04015FAB F40D469D 88255BD2 BEA86C52 E5516003 474E6971 2F9DC0D3 BEA5CBA2
A90BC18F BFAE2EF5 46F23F56 D4930DC3 8BA4988A 59D80862 A7CEB764 4ACA6EE0
D39F0A00 EB2E27B2 FDA1F4FE 488287BC 1A555CCC BDF30C39 CC1BE21E A34196B9
5CBA6D54 C534F7B8 39F91312 509DDF46 F906AB7E 1D609713 71C9577E 82BCF166
41245591 91
public-key-code end
peer-public-key end
#
ecc peer-public-key 10.0.1.2 encoding-type der
public-key-code begin
04001C30 47282860 652AA13B 4A9783E5 78370275 95CE2514 BB5B5588 64DC0388
2014D73D DB57A919 4D554BF8 97AA9841 05309F9E 4CA692B7 70A35AFF 4F580004
25450801 8487E749 D4BD16AD A58EC551 2CE45516 9DA76B1B 58187689 F465BDE5
6FFFC546 DC1E3BE7 B7A9C123 8FA04371 69E5C52B ED89E1B6 D30BA99F 24DFFEC2
3318F21C B7
public-key-code end
peer-public-key end
#
radius-server template default
#
pki realm default
#
ssl policy default_policy type server
pki-realm default
version tls1.2
ciphersuite rsa_aes_128_cbc_sha rsa_aes_128_sha256 rsa_aes_256_sha256 ecdhe_rsa_aes128_gcm_sha256 ecdhe_rsa_aes256_gcm_sha384
#
ike proposal default
encryption-algorithm aes-256 aes-192 aes-128
dh group14
authentication-algorithm sha2-512 sha2-384 sha2-256
authentication-method pre-share
integrity-algorithm hmac-sha2-256
prf hmac-sha2-256
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
ip pool test
gateway-list 192.168.24.1
network 192.168.24.0 mask 255.255.252.0
#
aaa
authentication-scheme default
authentication-scheme radius
authentication-mode radius
authorization-scheme default
accounting-scheme default
local-aaa-user password policy administrator
domain default
authentication-scheme default
domain default_admin
authentication-scheme default
local-user admin password irreversible-cipher 1a-vxlEzBuR3$Oh`b47t#0JSJX%A{PQ0SuhJTS494=a_cB!1K6%
local-user admin privilege level 15
local-user admin ftp-directory flash:
local-user admin service-type terminal ssh http
#
firewall zone Local
#
interface MEth0/0/0
ip address 192.168.1.1 255.255.255.0
dhcp select interface
#
interface Eth-Trunk2
undo portswitch
description istack-01
#
interface Eth-Trunk2.10
description User terminal
dot1q termination vid 10
ip address 192.168.24.1 255.255.252.0
dhcp select global
#
interface Eth-Trunk2.11
description Clock Display System
dot1q termination vid 11
ip address 192.168.13.1 255.255.255.0
#
interface Eth-Trunk2.12
description Flight Information Display System
dot1q termination vid 12
ip address 192.168.14.254 255.255.255.0
#
interface Eth-Trunk2.16
description CCTV
dot1q termination vid 16
ip address 192.168.18.254 255.255.255.0
#
interface Eth-Trunk2.17
description Access control
dot1q termination vid 17
ip address 192.168.19.254 255.255.255.0
#
interface Eth-Trunk2.18
description TV
dot1q termination vid 18
ip address 192.168.20.254 255.255.255.0
#
interface Eth-Trunk2.20
description Management
dot1q termination vid 20
ip address 10.0.1.1 255.255.255.0
#
interface Eth-Trunk2.25
description outdoor_camera
dot1q termination vid 1000
ip address 192.168.25.254 255.255.255.0
#
interface Eth-Trunk2.101
description Access Server
dot1q termination vid 101
ip address 192.168.21.254 255.255.255.0
#
interface Eth-Trunk2.200
description iBMC_OM1_IVS3000_01
dot1q termination vid 200
ip address 192.168.2.254 255.255.255.0
#
interface Eth-Trunk2.203
description Outer_OM1_IVS3000_01
dot1q termination vid 203
ip address 192.168.10.254 255.255.255.0
#
interface Eth-Trunk2.204
description Outer_Service1_IVS3000_01
dot1q termination vid 204
ip address 192.168.11.254 255.255.255.0
#
interface Eth-Trunk2.205
dot1q termination vid 205
ip address 192.168.8.254 255.255.255.0
#
interface Eth-Trunk2.208
description Outer_OM1_IVS3800_01
dot1q termination vid 208
ip address 192.168.9.254 255.255.255.0
#
interface Eth-Trunk2.209
description Outer_Service1_IVS3800_01
dot1q termination vid 209
ip address 192.168.12.254 255.255.255.0
#
interface GigabitEthernet0/0/0
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
#
interface GigabitEthernet0/0/6
#
interface GigabitEthernet0/0/7
#
interface GigabitEthernet0/0/8
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
description VirtualPort
ipv6 enable
ipv6 address auto link-local
ipv6 address auto global default
ip address dhcp-alloc
ipv6 address auto dhcp
#
interface GigabitEthernet3/0/0
#
interface GigabitEthernet3/0/1
#
interface GigabitEthernet3/0/2
#
interface GigabitEthernet3/0/3
#
interface GigabitEthernet4/0/0
#
interface GigabitEthernet4/0/1
#
interface GigabitEthernet4/0/2
#
interface GigabitEthernet4/0/3
#
interface XGigabitEthernet0/0/0
#
interface XGigabitEthernet0/0/1
#
interface XGigabitEthernet0/0/2
#
interface XGigabitEthernet0/0/3
#
interface XGigabitEthernet0/0/4
#
interface XGigabitEthernet0/0/5
#
interface XGigabitEthernet0/0/6
#
interface XGigabitEthernet0/0/7
#
interface XGigabitEthernet0/0/8
#
interface XGigabitEthernet0/0/9
#
interface XGigabitEthernet0/0/10
description to istack-01
eth-trunk 2
#
interface XGigabitEthernet0/0/11
description to istack-01
eth-trunk 2
#
interface XGigabitEthernet0/0/12
description to istack-01
eth-trunk 2
#
interface XGigabitEthernet0/0/13
description to istack-01
eth-trunk 2
#
interface NULL0
#
interface LoopBack0
ip address 10.0.0.130 255.255.255.255
#
snmp-agent local-engineid 800007DB03A400E2ADE038
snmp-agent community read %^%#e,Os~k!cdRVr}I<kJF2/";U5{@/P4&C-@<NV#&TQQ/Q3Zd&"q_kR6GA}M7cXH-3]oz0bKxAcS-h=%^%#
snmp-agent community write %^%#gbGJ+h=wWWUROB~qE+NE&['.J~l-P"[Bw!U;l!HD^po29h9)F_H)&&bY)7/^L)N;HHUUNFkrD>X7W/%^%#
snmp-agent sys-info version all
snmp-agent target-host trap-hostname esight-Server01 address 192.168.8.100 udp-port 161 trap-paramsname Pokhara#123
snmp-agent trap source LoopBack0
snmp-agent trap enable
snmp-agent extend error-code enable
snmp-agent
#
ssh client 10.0.1.2 assign ecc-key 10.0.1.2
ssh client 10.0.1.4 assign ecc-key 10.0.1.4
ssh client first-time enable
stelnet server enable
#
http secure-server ssl-policy default_policy
http secure-server enable
http server permit interface Meth0/0/0
#
fib regularly-refresh disable
#
user-interface con 0
authentication-mode aaa
user-interface vty 0
authentication-mode aaa
user privilege level 15
protocol inbound ssh
user-interface vty 1 4
protocol inbound ssh
#
wlan ac
traffic-profile name default
security-profile name default
security-profile name default-wds
security wpa2 psk pass-phrase %^%#,g"‘.jBBZWnyJqGKn0u5X(\lGc;dMTu{*c%[’;l@%^%# aes
ssid-profile name default
vap-profile name default
wds-profile name default
regulatory-domain-profile name default
air-scan-profile name default
rrm-profile name default
radio-2g-profile name default
radio-5g-profile name default
wids-spoof-profile name default
wids-profile name default
ap-system-profile name default
port-link-profile name default
wired-port-profile name default
ap-group name default
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#
ntp-service unicast-server 192.168.13.100
#
ops
#
autostart
#
secelog
#
ms-channel

#
return