wiki:Realisations/2007-2008/Projet/Core1/MIR

Version 1 (modified by oriol, 17 years ago) (diff)

--

Configuration Routeur Cisco 3525 (MIR)

!
configuration mode exclusive manual
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname MIR
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
no aaa new-model
monitor event-trace all-traces dump-file evenement_samir
ip cef
!
!
!
!
ip multicast-routing 
!
ipv6 unicast-routing
ftp-server enable
ftp-server topdir /
voice-card 0
 no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-1119902468
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1119902468
 revocation-check none
 rsakeypair TP-self-signed-1119902468
!
!
crypto pki certificate chain TP-self-signed-1119902468
 certificate self-signed 01
  3082023B 308201A4 A0030201 02020101 300D0609 2A864886 F70D0101 04050030 
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 
  69666963 6174652D 31313139 39303234 3638301E 170D3038 30363130 30393231 
  34365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 31313939 
  30323436 3830819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 
  8100B194 E26F4282 FC6E6177 A44D3B3A F14A5D47 D793CE79 BA1852F3 F8BDC562 
  6765159A 1105ECCE D613D1A9 3AC63A55 DFD17723 8F858DF7 8119284D CAB9E78C 
  5EC4FBA7 847D39C6 5A4109AD 3410EAEE AB2A53DD 27601786 7FBBD31A E27B2B19 
  C7537AF6 323C41A9 017E2779 724E1787 A792765D 6C3432C8 EE3F41EC 1D1FA297 
  12A50203 010001A3 63306130 0F060355 1D130101 FF040530 030101FF 300E0603 
  551D1104 07300582 034D4952 301F0603 551D2304 18301680 140717DD F3E3FE93 
  BB19A37B D986F49E 6DF569E9 70301D06 03551D0E 04160414 0717DDF3 E3FE93BB 
  19A37BD9 86F49E6D F569E970 300D0609 2A864886 F70D0101 04050003 818100A1 
  2002D299 22D98882 6B695836 1F1725E6 E3A8B0B3 E3AD8D6C 6A5CAAAE 3D7DF6CC 
  8C2695C7 7A84C95E 8B8D7F8C D873BD5F FF4EFF89 DF96A505 62200D28 77B74AA5 
  5DE92964 603D3F53 4D6A5724 5CB42694 D48D0133 A29920D9 B0990361 EDCF75B5 
  B2AE0953 C3FEB49C 810B8AA4 69A8C179 CE815D97 B8E21EA9 64823F38 278E52
  quit
!
!
class-map match-any SDMSVideo-GigabitEthernet0/0
 match protocol cuseeme
 match protocol netshow
 match protocol rtsp
 match protocol streamwork
 match protocol vdolive
class-map match-any SDMVoice-GigabitEthernet0/0
 match protocol rtp audio 
!
!
policy-map SDM-Pol-GigabitEthernet0/0
 class SDMVoice-GigabitEthernet0/0
  priority percent 70
  set dscp ef
 class SDMSVideo-GigabitEthernet0/0
  bandwidth remaining percent 40
  set dscp af41
!
! 
!
crypto isakmp policy 1
 hash md5
 authentication pre-share
 group 2
 lifetime 3600
crypto isakmp key plateforme6 address 10.20.1.2
!
!
crypto ipsec transform-set PapaBear esp-3des 
crypto ipsec transform-set MamaBear ah-md5-hmac esp-3des 
crypto ipsec transform-set BabyBear ah-md5-hmac 
!
crypto map armadillo 10 ipsec-isakmp 
 set peer 10.20.1.2
 set transform-set PapaBear MamaBear BabyBear 
 match address 101
!
!
!
!
interface GigabitEthernet0/0
 ip address 10.20.3.2 255.255.255.252
 ip nbar protocol-discovery
 ip pim dense-mode
 ip dvmrp unicast-routing
 duplex auto
 speed auto
 media-type rj45
 ipv6 address 2001:DB8:8000:1001::2/64
 ipv6 ospf 1 area 0
 no keepalive
 service-policy output SDM-Pol-GigabitEthernet0/0
 ip rsvp bandwidth 50000 2000
!
interface GigabitEthernet0/1
 ip address 10.20.7.1 255.255.255.0
 ip pim dense-mode
 ip igmp version 3
 ip dvmrp unicast-routing
 duplex auto
 speed auto
 media-type rj45
 ipv6 address 2001:DB8:8000:1002::1/64
 ipv6 address 2001:DB8:8000:1002:215:17FF:FE23:D596/64
 ipv6 ospf 1 area 0
 no keepalive
!
interface FastEthernet1/0
!
interface FastEthernet1/1
!
interface FastEthernet1/2
!
interface FastEthernet1/3
!
interface FastEthernet1/4
!
interface FastEthernet1/5
!
interface FastEthernet1/6
!
interface FastEthernet1/7
!
interface FastEthernet1/8
!
interface FastEthernet1/9
!
interface FastEthernet1/10
!
interface FastEthernet1/11
!
interface FastEthernet1/12
!
interface FastEthernet1/13
!
interface FastEthernet1/14
!
interface FastEthernet1/15
!
interface GigabitEthernet1/0
 no switchport
 ip address 10.20.1.1 255.255.255.252
 ip nbar protocol-discovery
 ip pim dense-mode
 ip dvmrp unicast-routing
 ipv6 address 2001:DB8:8000:3::1/64
 ipv6 ospf 1 area 0
 service-policy output SDM-Pol-GigabitEthernet0/0
 ip rsvp bandwidth 50000 2000
!
interface FastEthernet2/0
!
interface FastEthernet2/1
!
interface FastEthernet2/2
!
interface FastEthernet2/3
!
interface FastEthernet2/4
!
interface FastEthernet2/5
!
interface FastEthernet2/6
!
interface FastEthernet2/7
!
interface FastEthernet2/8
!
interface FastEthernet2/9
!
interface FastEthernet2/10
!
interface FastEthernet2/11
!
interface FastEthernet2/12
!
interface FastEthernet2/13
!
interface FastEthernet2/14
!
interface FastEthernet2/15
!
interface GigabitEthernet2/0
 no switchport
 ip address 10.20.2.1 255.255.255.252
 ip nbar protocol-discovery
 ip pim dense-mode
 ip dvmrp unicast-routing
 ipv6 address 2001:DB8:8000:1::1/64
 ipv6 ospf 1 area 0
 service-policy output SDM-Pol-GigabitEthernet0/0
 ip rsvp bandwidth 50000 2000
!
interface Vlan1
 no ip address
!
router ospf 65002
 log-adjacency-changes
 network 10.20.0.0 0.0.255.255 area 0
!
router bgp 65002
 bgp router-id 10.20.2.1
 bgp log-neighbor-changes
 neighbor 10.20.1.2 remote-as 65001
 neighbor 10.20.2.2 remote-as 65003
 neighbor 10.20.3.1 remote-as 65002
 neighbor 2001:DB8:8000:1::2 remote-as 65003
 neighbor 2001:DB8:8000:3::2 remote-as 65001
 !
 address-family ipv4
 redistribute ospf 65002
 neighbor 10.20.1.2 activate
 neighbor 10.20.2.2 activate
 neighbor 10.20.3.1 activate
 no neighbor 2001:DB8:8000:1::2 activate
 no neighbor 2001:DB8:8000:3::2 activate
 no auto-summary
 no synchronization
 network 10.20.0.0 mask 255.255.0.0
 exit-address-family
 !
 address-family ipv6
 neighbor 2001:DB8:8000:1::2 activate
 neighbor 2001:DB8:8000:1::2 soft-reconfiguration inbound
 neighbor 2001:DB8:8000:1::2 prefix-list to-Mypeer1 out
 neighbor 2001:DB8:8000:3::2 activate
 neighbor 2001:DB8:8000:3::2 soft-reconfiguration inbound
 network 2001:DB8:8000::/48
 exit-address-family
!
!
!
ip http server
ip http secure-server
ip pim ssm default
!
access-list 101 permit ip 10.20.7.0 0.0.0.255 10.10.1.0 0.0.0.255
ipv6 router ospf 1
 log-adjacency-changes
!
!
!
ipv6 prefix-list to-Mypeer1 seq 10 permit 2001:DB8:8000::/48
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 5
 privilege level 15
 password cisco
 login
!
scheduler allocate 20000 1000
!