Configuration Routeur Cisco 3825 (ISS)

!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ISS
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
no aaa new-model
ip cef
!
!
!
!
ip multicast-routing 
!
ipv6 unicast-routing
ftp-server enable
ftp-server topdir /
voice-card 0
 no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-928275743
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-928275743
 revocation-check none
 rsakeypair TP-self-signed-928275743
!
!
crypto pki certificate chain TP-self-signed-928275743
 certificate self-signed 01
  30820239 308201A2 A0030201 02020101 300D0609 2A864886 F70D0101 04050030 
  30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274 
  69666963 6174652D 39323832 37353734 33301E17 0D303830 36313030 39333034 
  365A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F 
  532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3932 38323735 
  37343330 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100 
  C82E9D09 0078320E 991CFA6C 580D1570 6AA33D59 E1218C71 30CDFC54 09EB1EAC 
  5ABC776F C5ADFC3D FDD2D920 1FAC3C2E BB0F6625 F55A29C4 86CE3ED1 AD5FCE7C 
  6535213A 5CFBFF2E 0C0B32C7 49CD9561 824139A0 ED369AE3 216DB2B5 186DA2CF 
  490E4D0E 502E21AD EBEF0F93 C7978811 5E349484 75DDE2D5 834908E3 6BC3299B 
  02030100 01A36330 61300F06 03551D13 0101FF04 05300301 01FF300E 0603551D 
  11040730 05820349 5353301F 0603551D 23041830 168014B5 A25B4927 79E5F375 
  0EF6A58E 53A3B974 B9E4E830 1D060355 1D0E0416 0414B5A2 5B492779 E5F3750E 
  F6A58E53 A3B974B9 E4E8300D 06092A86 4886F70D 01010405 00038181 00782BA9 
  B3CE501C 7A277A65 89BBB6DA F5F8C2A7 6906219A 62DE43CA 36C1CD07 C1AA3FAF 
  836E4225 DCD5AC8B B0558618 7F0E85E8 17ED50BB 117BC6AA FC491710 2A6611DB 
  3ABF0740 8CD91583 61989EE7 E0CADCFA 023F3054 362F6613 E36A0188 D6CC88FA 
  2F762609 46AAD89F 874292DD B2BC6A55 7519E8EA E055E209 0F7FC96B 9F
  quit
username ISS
!
!
class-map match-any SDMBulk-GigabitEthernet0/0
 match protocol exchange
 match protocol ftp
 match protocol irc
 match protocol nntp
 match protocol pop3
 match protocol printer
 match protocol secure-ftp
 match protocol secure-irc
 match protocol secure-nntp
 match protocol secure-pop3
 match protocol smtp
 match protocol tftp
class-map match-any SDMSVideo-GigabitEthernet0/0
 match protocol cuseeme
 match protocol netshow
 match protocol rtsp
 match protocol streamwork
 match protocol vdolive
class-map match-any SDMVoice-GigabitEthernet0/0
 match protocol rtp audio 
!
!
policy-map SDM-Pol-GigabitEthernet0/0
 class SDMVoice-GigabitEthernet0/0
  priority percent 70
  set dscp ef
 class SDMSVideo-GigabitEthernet0/0
  bandwidth remaining percent 40
  set dscp af41
!
! 
!
crypto isakmp policy 1
 hash md5
 authentication pre-share
 group 2
 lifetime 3600
crypto isakmp key plateforme6 address 10.20.1.2
!
!
crypto ipsec transform-set PapaBear esp-3des 
crypto ipsec transform-set MamaBear ah-md5-hmac esp-3des 
crypto ipsec transform-set BabyBear ah-md5-hmac 
!
crypto map armadillo 10 ipsec-isakmp 
 set peer 10.20.1.2
 set transform-set MamaBear 
 match address 101
 qos pre-classify
!
!
!
!
interface GigabitEthernet0/0
 ip address 10.20.3.1 255.255.255.252
 ip nbar protocol-discovery
 ip pim dense-mode
 ip igmp version 3
 ip dvmrp unicast-routing
 duplex auto
 speed auto
 media-type rj45
 ipv6 address 2001:DB8:8000:1001::/64
 ipv6 address 2001:DB8:8000:1001::1/64
 ipv6 ospf 1 area 0
 no keepalive
 service-policy output SDM-Pol-GigabitEthernet0/0
 ip rsvp bandwidth 50000 2000
!
interface GigabitEthernet0/1
 ip address 10.20.4.2 255.255.255.0
 ip dvmrp unicast-routing
 duplex auto
 speed auto
 media-type rj45
 ipv6 address autoconfig
 no keepalive
!
interface FastEthernet1/0
!
interface FastEthernet1/1
!
interface FastEthernet1/2
!
interface FastEthernet1/3
!
interface FastEthernet1/4
!
interface FastEthernet1/5
!
interface FastEthernet1/6
!
interface FastEthernet1/7
!
interface FastEthernet1/8
!
interface FastEthernet1/9
!
interface FastEthernet1/10
!
interface FastEthernet1/11
!
interface FastEthernet1/12
!
interface FastEthernet1/13
!
interface FastEthernet1/14
!
interface FastEthernet1/15
!
interface GigabitEthernet1/0
 no switchport
 ip address 10.20.6.1 255.255.255.252
 ip nbar protocol-discovery
 ip pim dense-mode
 ip igmp query-interval 125
 ip dvmrp unicast-routing
 ipv6 address 2001:DB8:8000:2::1/64
 ipv6 ospf 1 area 0
 service-policy output SDM-Pol-GigabitEthernet0/0
 ip rsvp bandwidth 50000 2000
!
interface FastEthernet2/0
!
interface FastEthernet2/1
!
interface FastEthernet2/2
!
interface FastEthernet2/3
!
interface FastEthernet2/4
!
interface FastEthernet2/5
!
interface FastEthernet2/6
!
interface FastEthernet2/7
!
interface FastEthernet2/8
!
interface FastEthernet2/9
!
interface FastEthernet2/10
!
interface FastEthernet2/11
!
interface FastEthernet2/12
!
interface FastEthernet2/13
!
interface FastEthernet2/14
!
interface FastEthernet2/15
!
interface GigabitEthernet2/0
 no switchport
 ip address 10.20.5.1 255.255.255.0
 ip pim dense-mode
 ip dvmrp unicast-routing
 ipv6 address 2001:DB8:8000:1003::1/64
 ipv6 ospf 1 area 0
!
interface Vlan1
 no ip address
!
router ospf 65002
 log-adjacency-changes
 network 10.20.0.0 0.0.255.255 area 0
!
router bgp 65002
 bgp router-id 10.20.6.1
 bgp log-neighbor-changes
 neighbor 10.20.3.2 remote-as 65002
 neighbor 10.20.6.2 remote-as 65003
 neighbor 2001:DB8:8000:2::2 remote-as 65003
 !
 address-family ipv4
 redistribute ospf 65002
 neighbor 10.20.3.2 activate
 neighbor 10.20.6.2 activate
 no neighbor 2001:DB8:8000:2::2 activate
 no auto-summary
 no synchronization
 network 10.20.0.0 mask 255.255.0.0
 exit-address-family
 !
 address-family ipv6
 neighbor 2001:DB8:8000:2::2 activate
 neighbor 2001:DB8:8000:2::2 soft-reconfiguration inbound
 neighbor 2001:DB8:8000:2::2 prefix-list to-Mypeer1 out
 network 2001:DB8:8000::/48
 exit-address-family
!
!
!
ip http server
ip http secure-server
ip pim bidir-enable
!
access-list 101 permit ip 10.20.5.0 0.0.0.255 10.10.1.0 0.0.0.255
snmp-server user 65002 65002 v3 
snmp-server group 65002 v3 noauth notify *tv.00000002.08000000.000801207F 
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps vrrp
snmp-server enable traps ds1
snmp-server enable traps tty
snmp-server enable traps eigrp
snmp-server enable traps xgcp
snmp-server enable traps flash insertion removal
snmp-server enable traps ds3
snmp-server enable traps envmon
snmp-server enable traps icsudsu
snmp-server enable traps isdn call-information
snmp-server enable traps isdn layer2
snmp-server enable traps isdn chan-not-avail
snmp-server enable traps isdn ietf
snmp-server enable traps ds0-busyout
snmp-server enable traps ds1-loopback
snmp-server enable traps atm subif
snmp-server enable traps bgp
snmp-server enable traps bulkstat collection transfer
snmp-server enable traps cnpd
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps dial
snmp-server enable traps dsp card-status
snmp-server enable traps entity
snmp-server enable traps event-manager
snmp-server enable traps frame-relay
snmp-server enable traps frame-relay subif
snmp-server enable traps hsrp
snmp-server enable traps ipmobile
snmp-server enable traps ipmulticast
snmp-server enable traps mpls ldp
snmp-server enable traps mpls traffic-eng
snmp-server enable traps mpls vpn
snmp-server enable traps msdp
snmp-server enable traps mvpn
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps ospf retransmit
snmp-server enable traps ospf lsa
snmp-server enable traps ospf cisco-specific state-change nssa-trans-change
snmp-server enable traps ospf cisco-specific state-change shamlink interface-old
snmp-server enable traps ospf cisco-specific state-change shamlink neighbor
snmp-server enable traps ospf cisco-specific errors
snmp-server enable traps ospf cisco-specific retransmit
snmp-server enable traps ospf cisco-specific lsa
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-message
snmp-server enable traps pppoe
snmp-server enable traps cpu threshold
snmp-server enable traps rsvp
snmp-server enable traps rtr
snmp-server enable traps syslog
snmp-server enable traps l2tun session
snmp-server enable traps vsimaster
snmp-server enable traps vtp
snmp-server enable traps isakmp policy add
snmp-server enable traps isakmp policy delete
snmp-server enable traps isakmp tunnel start
snmp-server enable traps isakmp tunnel stop
snmp-server enable traps ipsec cryptomap add
snmp-server enable traps ipsec cryptomap delete
snmp-server enable traps ipsec cryptomap attach
snmp-server enable traps ipsec cryptomap detach
snmp-server enable traps ipsec tunnel start
snmp-server enable traps ipsec tunnel stop
snmp-server enable traps ipsec too-many-sas
snmp-server enable traps rf
snmp-server enable traps voice poor-qov
snmp-server enable traps voice fallback
snmp-server enable traps dnis
snmp-server manager
ipv6 route 2001:DB8:8000:1001::/64 Null0
ipv6 router ospf 1
 log-adjacency-changes
 summary-prefix 2001:DB8:8000::/80
!
!
!
!
snmp mib target list 10.40.5.2 host 0.0.0.0
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 3
 privilege level 15
 password cisco
 login
line vty 4
 login
!
scheduler allocate 20000 1000
!