Here it is....
Current configuration : 12669 bytes
!
! Last configuration change at 14:13:24 UTC Thu Jan 17 2008 by wgranada
! NVRAM config last updated at 20:31:35 UTC Fri Dec 7 2007 by wgranada
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec show-timezone
service timestamps log datetime msec show-timezone
service password-encryption
no service dhcp
!
hostname sfscitrt2
!
boot-start-marker
boot system flash flash:c2800nm-advipservicesk9-mz.124-3d.bin
boot-end-marker
!
security authentication failure rate 10 log
logging buffered 16000 informational
no logging console
!
aaa new-model
!
!
!
aaa session-id common
!
resource policy
!
ip subnet-zero
no ip source-route
ip gratuitous-arps
ip tcp selective-ack
ip tcp path-mtu-discovery
!
!
ip cef
!
!
!
track 10 rtr 1 reachability
!
track 20 rtr 2 reachability
!
class-map match-all cit-pref-cmap-egress
match access-group 182
!
!
policy-map vti-pmap
class class-default
shape average 512000
policy-map cit-pmap-egress
class cit-pref-cmap-egress
bandwidth percent 85
class class-default
fair-queue
!
!
crypto logging session
!
crypto isakmp policy 1
encr aes 256
authentication pre-share
group 5
crypto isakmp key
crypto isakmp keepalive 10
!
!
crypto ipsec transform-set
!
crypto ipsec profile vti
set transform-set sfscitrt2-tset
!
!
!
!
interface Tunnel101
bandwidth 512000
ip address XXXXX
ip nat inside
ip virtual-reassembly
ip ospf network point-to-point
tunnel source this router
tunnel destination distant end ip
service-policy output vti-pmap
!
interface Null0
no ip unreachables
!
interface Loopback0
ip address XXXX
ntp disable
!
interface FastEthernet0/0
ip address XXXX
ip access-group SFSHOSTS in
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip rip send version 2
ip rip receive version 2
ip virtual-reassembly
no ip mroute-cache
duplex full
speed 100
ntp disable
no cdp enable
no mop enabled
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 1536
ip address XXXXX
encapsulation frame-relay
no ip mroute-cache
no fair-queue
service-module t1 timeslots 1-24
frame-relay traffic-shaping
frame-relay map ip distant end IP 121 broadcast
frame-relay lmi-type cisco
!
interface BRI0/1/0
no ip address
shutdown
!
router ospf 1
router-id XXXX
log-adjacency-changes
summary-address
summary-address
summary-address
summary-address
redistribute connected subnets route-map redis-connected
redistribute static metric 5 subnets route-map redis-static
redistribute rip metric 5 subnets route-map redist-from-citi
passive-interface default
no passive-interface Tunnel101
network XXXX area 2
!
router rip
version 2
redistribute static metric 5 route-map announce-to-citi-rmap
passive-interface default
no passive-interface FastEthernet0/0
network XXXX
distribute-list announce-to-citi-list out
distribute-list citi-cep-routes in
distance 75
no auto-summary
!
ip classless
!
!
!
map-class frame-relay 256/128
frame-relay cir 256000
frame-relay bc 32000
frame-relay mincir 128000
frame-relay adaptive-shaping becn
!
map-class frame-relay cit-fr-cmap
frame-relay cir 1536000
frame-relay bc 192000
frame-relay mincir 768000
frame-relay adaptive-shaping becn
no cdp run
!
route-map redist-from-citi permit 10
match ip address citi-cep-routes
!
route-map redis-connected permit 10
match ip address 31
!
route-map announce-to-citi-rmap permit 10
match ip address announce-to-citi-list
!
route-map redis-static permit 10
match ip address 32
!
!
!
!
control-plane
!
!
!
!
!
!
end
