Configuration Routeur Cisco 3825 (MIR)
!
configuration mode exclusive manual
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname MIR
!
boot-start-marker
boot-end-marker
!
enable password cisco
!
no aaa new-model
monitor event-trace all-traces dump-file evenement_samir
ip cef
!
!
!
!
ip multicast-routing
!
ipv6 unicast-routing
ftp-server enable
ftp-server topdir /
voice-card 0
no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-1119902468
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1119902468
revocation-check none
rsakeypair TP-self-signed-1119902468
!
!
crypto pki certificate chain TP-self-signed-1119902468
certificate self-signed 01
3082023B 308201A4 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31313139 39303234 3638301E 170D3038 30363130 30393231
34365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 31313939
30323436 3830819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100B194 E26F4282 FC6E6177 A44D3B3A F14A5D47 D793CE79 BA1852F3 F8BDC562
6765159A 1105ECCE D613D1A9 3AC63A55 DFD17723 8F858DF7 8119284D CAB9E78C
5EC4FBA7 847D39C6 5A4109AD 3410EAEE AB2A53DD 27601786 7FBBD31A E27B2B19
C7537AF6 323C41A9 017E2779 724E1787 A792765D 6C3432C8 EE3F41EC 1D1FA297
12A50203 010001A3 63306130 0F060355 1D130101 FF040530 030101FF 300E0603
551D1104 07300582 034D4952 301F0603 551D2304 18301680 140717DD F3E3FE93
BB19A37B D986F49E 6DF569E9 70301D06 03551D0E 04160414 0717DDF3 E3FE93BB
19A37BD9 86F49E6D F569E970 300D0609 2A864886 F70D0101 04050003 818100A1
2002D299 22D98882 6B695836 1F1725E6 E3A8B0B3 E3AD8D6C 6A5CAAAE 3D7DF6CC
8C2695C7 7A84C95E 8B8D7F8C D873BD5F FF4EFF89 DF96A505 62200D28 77B74AA5
5DE92964 603D3F53 4D6A5724 5CB42694 D48D0133 A29920D9 B0990361 EDCF75B5
B2AE0953 C3FEB49C 810B8AA4 69A8C179 CE815D97 B8E21EA9 64823F38 278E52
quit
!
!
class-map match-any SDMSVideo-GigabitEthernet0/0
match protocol cuseeme
match protocol netshow
match protocol rtsp
match protocol streamwork
match protocol vdolive
class-map match-any SDMVoice-GigabitEthernet0/0
match protocol rtp audio
!
!
policy-map SDM-Pol-GigabitEthernet0/0
class SDMVoice-GigabitEthernet0/0
priority percent 70
set dscp ef
class SDMSVideo-GigabitEthernet0/0
bandwidth remaining percent 40
set dscp af41
!
!
!
crypto isakmp policy 1
hash md5
authentication pre-share
group 2
lifetime 3600
crypto isakmp key plateforme6 address 10.20.1.2
!
!
crypto ipsec transform-set PapaBear esp-3des
crypto ipsec transform-set MamaBear ah-md5-hmac esp-3des
crypto ipsec transform-set BabyBear ah-md5-hmac
!
crypto map armadillo 10 ipsec-isakmp
set peer 10.20.1.2
set transform-set PapaBear MamaBear BabyBear
match address 101
!
!
!
!
interface GigabitEthernet0/0
ip address 10.20.3.2 255.255.255.252
ip nbar protocol-discovery
ip pim dense-mode
ip dvmrp unicast-routing
duplex auto
speed auto
media-type rj45
ipv6 address 2001:DB8:8000:1001::2/64
ipv6 ospf 1 area 0
no keepalive
service-policy output SDM-Pol-GigabitEthernet0/0
ip rsvp bandwidth 50000 2000
!
interface GigabitEthernet0/1
ip address 10.20.7.1 255.255.255.0
ip pim dense-mode
ip igmp version 3
ip dvmrp unicast-routing
duplex auto
speed auto
media-type rj45
ipv6 address 2001:DB8:8000:1002::1/64
ipv6 address 2001:DB8:8000:1002:215:17FF:FE23:D596/64
ipv6 ospf 1 area 0
no keepalive
!
interface FastEthernet1/0
!
interface FastEthernet1/1
!
interface FastEthernet1/2
!
interface FastEthernet1/3
!
interface FastEthernet1/4
!
interface FastEthernet1/5
!
interface FastEthernet1/6
!
interface FastEthernet1/7
!
interface FastEthernet1/8
!
interface FastEthernet1/9
!
interface FastEthernet1/10
!
interface FastEthernet1/11
!
interface FastEthernet1/12
!
interface FastEthernet1/13
!
interface FastEthernet1/14
!
interface FastEthernet1/15
!
interface GigabitEthernet1/0
no switchport
ip address 10.20.1.1 255.255.255.252
ip nbar protocol-discovery
ip pim dense-mode
ip dvmrp unicast-routing
ipv6 address 2001:DB8:8000:3::1/64
ipv6 ospf 1 area 0
service-policy output SDM-Pol-GigabitEthernet0/0
ip rsvp bandwidth 50000 2000
!
interface FastEthernet2/0
!
interface FastEthernet2/1
!
interface FastEthernet2/2
!
interface FastEthernet2/3
!
interface FastEthernet2/4
!
interface FastEthernet2/5
!
interface FastEthernet2/6
!
interface FastEthernet2/7
!
interface FastEthernet2/8
!
interface FastEthernet2/9
!
interface FastEthernet2/10
!
interface FastEthernet2/11
!
interface FastEthernet2/12
!
interface FastEthernet2/13
!
interface FastEthernet2/14
!
interface FastEthernet2/15
!
interface GigabitEthernet2/0
no switchport
ip address 10.20.2.1 255.255.255.252
ip nbar protocol-discovery
ip pim dense-mode
ip dvmrp unicast-routing
ipv6 address 2001:DB8:8000:1::1/64
ipv6 ospf 1 area 0
service-policy output SDM-Pol-GigabitEthernet0/0
ip rsvp bandwidth 50000 2000
!
interface Vlan1
no ip address
!
router ospf 65002
log-adjacency-changes
network 10.20.0.0 0.0.255.255 area 0
!
router bgp 65002
bgp router-id 10.20.2.1
bgp log-neighbor-changes
neighbor 10.20.1.2 remote-as 65001
neighbor 10.20.2.2 remote-as 65003
neighbor 10.20.3.1 remote-as 65002
neighbor 2001:DB8:8000:1::2 remote-as 65003
neighbor 2001:DB8:8000:3::2 remote-as 65001
!
address-family ipv4
redistribute ospf 65002
neighbor 10.20.1.2 activate
neighbor 10.20.2.2 activate
neighbor 10.20.3.1 activate
no neighbor 2001:DB8:8000:1::2 activate
no neighbor 2001:DB8:8000:3::2 activate
no auto-summary
no synchronization
network 10.20.0.0 mask 255.255.0.0
exit-address-family
!
address-family ipv6
neighbor 2001:DB8:8000:1::2 activate
neighbor 2001:DB8:8000:1::2 soft-reconfiguration inbound
neighbor 2001:DB8:8000:1::2 prefix-list to-Mypeer1 out
neighbor 2001:DB8:8000:3::2 activate
neighbor 2001:DB8:8000:3::2 soft-reconfiguration inbound
network 2001:DB8:8000::/48
exit-address-family
!
!
!
ip http server
ip http secure-server
ip pim ssm default
!
access-list 101 permit ip 10.20.7.0 0.0.0.255 10.10.1.0 0.0.0.255
ipv6 router ospf 1
log-adjacency-changes
!
!
!
ipv6 prefix-list to-Mypeer1 seq 10 permit 2001:DB8:8000::/48
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 5
privilege level 15
password cisco
login
!
scheduler allocate 20000 1000
!
