| 1 | = Configuration Cisco 2801 (MARS) = |
| 2 | |
| 3 | {{{ |
| 4 | ! |
| 5 | version 12.4 |
| 6 | service timestamps debug datetime msec |
| 7 | service timestamps log datetime msec |
| 8 | service password-encryption |
| 9 | ! |
| 10 | hostname MARS |
| 11 | ! |
| 12 | boot-start-marker |
| 13 | boot-end-marker |
| 14 | ! |
| 15 | no logging buffered |
| 16 | enable password 7 0822455D0A16 |
| 17 | ! |
| 18 | no aaa new-model |
| 19 | ip cef |
| 20 | ! |
| 21 | ! |
| 22 | no ip dhcp use vrf connected |
| 23 | ip dhcp excluded-address 10.10.1.1 |
| 24 | ip dhcp excluded-address 10.10.1.13 10.10.1.254 |
| 25 | ! |
| 26 | ip dhcp pool interne |
| 27 | import all |
| 28 | network 10.10.1.0 255.255.255.0 |
| 29 | ! |
| 30 | ip dhcp pool tftp-server-name |
| 31 | host 10.20.5.3 255.255.255.0 |
| 32 | hardware-address 0015.1724.cb09 |
| 33 | ! |
| 34 | ! |
| 35 | ip multicast-routing |
| 36 | ! |
| 37 | ipv6 unicast-routing |
| 38 | ipv6 cef |
| 39 | ftp-server enable |
| 40 | ftp-server topdir / |
| 41 | ! |
| 42 | voice-card 0 |
| 43 | ! |
| 44 | ! |
| 45 | ! |
| 46 | ! |
| 47 | ! |
| 48 | ! |
| 49 | ! |
| 50 | ! |
| 51 | ! |
| 52 | ! |
| 53 | ! |
| 54 | ! |
| 55 | ! |
| 56 | crypto pki trustpoint TP-self-signed-2922593269 |
| 57 | enrollment selfsigned |
| 58 | subject-name cn=IOS-Self-Signed-Certificate-2922593269 |
| 59 | revocation-check none |
| 60 | rsakeypair TP-self-signed-2922593269 |
| 61 | ! |
| 62 | ! |
| 63 | crypto pki certificate chain TP-self-signed-2922593269 |
| 64 | certificate self-signed 01 |
| 65 | 30820241 308201AA A0030201 02020101 300D0609 2A864886 F70D0101 04050030 |
| 66 | 31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 |
| 67 | 69666963 6174652D 32393232 35393332 3639301E 170D3038 30363130 30393135 |
| 68 | 31345A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 |
| 69 | 4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 39323235 |
| 70 | 39333236 3930819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 |
| 71 | 8100ABF3 9323A369 E5445A36 4C4EDDF1 C6616AC1 2B62C87C B1200923 24B6B281 |
| 72 | B3CDEA14 8D96B101 82B3C310 849C4851 212EF7EB 8C39B55B 9B1C89F6 684F650F |
| 73 | D1C35F56 E4B694F9 0F138E3C 867B84CD E4A0C0FB F0BF9069 110CFBDD 421610E9 |
| 74 | 20505864 99DA45C7 E457DE5F 3C60F285 2C40429C 49A919F9 86C6E98B 0632A25C |
| 75 | E3CB0203 010001A3 69306730 0F060355 1D130101 FF040530 030101FF 30140603 |
| 76 | 551D1104 0D300B82 09636973 636F3238 3030301F 0603551D 23041830 168014AD |
| 77 | 6475235A 584BF944 427F2CC4 321C43FD CBD16630 1D060355 1D0E0416 0414AD64 |
| 78 | 75235A58 4BF94442 7F2CC432 1C43FDCB D166300D 06092A86 4886F70D 01010405 |
| 79 | 00038181 00A15D6A E977BCDD 2D4FA2DC 4E95D8EE 424A04A5 44D7DD10 015A2835 |
| 80 | 0BEC60C4 DD647A7D D7C03FB8 1D44C322 84B0A7B1 FEDEB588 E3FA666B E53E837A |
| 81 | B2B322F8 9EC67711 E878EADF BCF32980 12A499C2 361C0BBF F189518E C5C8C3EA |
| 82 | 72F6B483 CEF04AE6 3FB0D044 99B7794B D42626F5 E872DA4D 2E95A02F 743CD2DC |
| 83 | 5E38C2F6 F1 |
| 84 | quit |
| 85 | username david privilege 15 password 7 001415140148 |
| 86 | ! |
| 87 | ! |
| 88 | class-map match-any SDMVoice-FastEthernet0/1 |
| 89 | match protocol rtp audio |
| 90 | match dscp ef |
| 91 | class-map match-any SDMSVideo-FastEthernet0/1 |
| 92 | match protocol cuseeme |
| 93 | match protocol netshow |
| 94 | match protocol rtsp |
| 95 | match protocol streamwork |
| 96 | match protocol vdolive |
| 97 | ! |
| 98 | ! |
| 99 | policy-map SDM-Pol-FastEthernet0/1 |
| 100 | class SDMVoice-FastEthernet0/1 |
| 101 | priority percent 70 |
| 102 | set dscp default |
| 103 | class SDMSVideo-FastEthernet0/1 |
| 104 | bandwidth remaining percent 40 |
| 105 | set dscp af41 |
| 106 | ! |
| 107 | ! |
| 108 | ! |
| 109 | crypto isakmp policy 1 |
| 110 | hash md5 |
| 111 | authentication pre-share |
| 112 | group 2 |
| 113 | lifetime 3600 |
| 114 | crypto isakmp key plateforme6 address 10.20.3.1 |
| 115 | ! |
| 116 | ! |
| 117 | crypto ipsec transform-set PapaBear esp-3des |
| 118 | crypto ipsec transform-set MamaBear ah-md5-hmac esp-3des |
| 119 | crypto ipsec transform-set BabyBear ah-md5-hmac |
| 120 | ! |
| 121 | crypto map armadillo 10 ipsec-isakmp |
| 122 | set peer 10.20.3.1 |
| 123 | set transform-set MamaBear |
| 124 | match address 101 |
| 125 | qos pre-classify |
| 126 | ! |
| 127 | ! |
| 128 | ! |
| 129 | ! |
| 130 | interface FastEthernet0/0 |
| 131 | description inside network interface |
| 132 | ip address 10.10.0.1 255.255.255.252 |
| 133 | ip pim dense-mode |
| 134 | ip igmp version 3 |
| 135 | ip dvmrp unicast-routing |
| 136 | duplex auto |
| 137 | speed auto |
| 138 | ipv6 address 2001:DB8:8001:2000::1/64 |
| 139 | ipv6 enable |
| 140 | ipv6 ospf 1 area 0 |
| 141 | ! |
| 142 | interface FastEthernet0/1 |
| 143 | description outside network interface |
| 144 | ip address 10.20.1.2 255.255.255.252 |
| 145 | ip nbar protocol-discovery |
| 146 | ip pim dense-mode |
| 147 | ip igmp version 3 |
| 148 | ip dvmrp unicast-routing |
| 149 | duplex auto |
| 150 | speed auto |
| 151 | ipv6 address 2001:DB8:8000:3::2/64 |
| 152 | ipv6 enable |
| 153 | ipv6 nd suppress-ra |
| 154 | service-policy output SDM-Pol-FastEthernet0/1 |
| 155 | ip rsvp bandwidth 50000 2000 |
| 156 | ! |
| 157 | router ospf 65001 |
| 158 | router-id 10.10.0.1 |
| 159 | log-adjacency-changes |
| 160 | redistribute bgp 65001 |
| 161 | neighbor 10.10.0.2 |
| 162 | ! |
| 163 | router rip |
| 164 | version 2 |
| 165 | network 10.0.0.0 |
| 166 | neighbor 10.10.0.2 |
| 167 | ! |
| 168 | router bgp 65001 |
| 169 | bgp router-id 10.20.1.2 |
| 170 | no bgp default ipv4-unicast |
| 171 | no bgp log-neighbor-changes |
| 172 | neighbor 10.20.1.1 remote-as 65002 |
| 173 | neighbor 2001:DB8:8000:3::1 remote-as 65002 |
| 174 | ! |
| 175 | address-family ipv4 |
| 176 | neighbor 10.20.1.1 activate |
| 177 | no auto-summary |
| 178 | no synchronization |
| 179 | network 10.10.0.0 mask 255.255.0.0 |
| 180 | exit-address-family |
| 181 | ! |
| 182 | address-family ipv6 |
| 183 | neighbor 2001:DB8:8000:3::1 activate |
| 184 | neighbor 2001:DB8:8000:3::1 soft-reconfiguration inbound |
| 185 | neighbor 2001:DB8:8000:3::1 prefix-list to-AS2 out |
| 186 | network 2001:DB8:8001::/48 |
| 187 | exit-address-family |
| 188 | ! |
| 189 | ip route 0.0.0.0 0.0.0.0 10.20.1.1 |
| 190 | ip route 10.10.0.0 255.255.0.0 10.10.0.2 |
| 191 | ! |
| 192 | ! |
| 193 | ip http server |
| 194 | ip http secure-server |
| 195 | ip pim ssm default |
| 196 | ! |
| 197 | access-list 101 permit ip 10.10.1.0 0.0.0.255 10.20.5.0 0.0.0.255 |
| 198 | ipv6 router ospf 1 |
| 199 | router-id 10.10.0.1 |
| 200 | log-adjacency-changes |
| 201 | area 0 range 2001:DB8:8001::/48 |
| 202 | redistribute bgp 65001 |
| 203 | ! |
| 204 | ! |
| 205 | ! |
| 206 | ipv6 prefix-list to-AS2 seq 5 permit 2001:DB8:8001::/48 |
| 207 | ! |
| 208 | ! |
| 209 | ! |
| 210 | control-plane |
| 211 | ! |
| 212 | ! |
| 213 | ! |
| 214 | ! |
| 215 | ! |
| 216 | ! |
| 217 | ! |
| 218 | ! |
| 219 | ! |
| 220 | line con 0 |
| 221 | line aux 0 |
| 222 | line vty 0 4 |
| 223 | privilege level 15 |
| 224 | password 7 110A1016141D |
| 225 | login |
| 226 | transport input telnet ssh |
| 227 | transport output telnet ssh |
| 228 | ! |
| 229 | scheduler allocate 20000 1000 |
| 230 | }}} |