Current configuration : 8998 bytes
!
! Last configuration change at 15:42:57 EST Wed Dec 28 2005
! NVRAM config last updated at 15:42:58 EST Wed Dec 28 2005
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname THESUMMIT-2801
!
boot-start-marker
boot system flash c2801-advipservicesk9-mz.124-2.T.bin
boot-end-marker
!
logging buffered 51200 warnings
enable password 7 0459030506324F41
!
no aaa new-model
!
resource policy
!
clock timezone EST -5
clock summer-time EDT recurring
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 2.2.3.1 2.2.3.10
ip dhcp excluded-address 1.1.2.1 1.1.2.10
!
ip dhcp pool DHCP_POOL
   network 2.2.3.0 255.255.255.0
   option 150 ip 1.1.1.2 1.1.1.1
   dns-server 2.2.2.9 2.2.2.10 63.240.76.135 204.127.194.11
   default-router 2.2.3.1
   lease 7
!
ip dhcp pool IPPHONES
   network 1.1.2.0 255.255.255.0
   option 150 ip 1.1.1.2 1.1.1.1
   default-router 1.1.2.1
   dns-server 2.2.2.9 2.2.2.10
   lease 5
!
!
ip tftp source-interface FastEthernet0/0.50
no ip domain lookup
no ip ips deny-action ips-interface
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-1424909183
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1424909183
 revocation-check none
 rsakeypair TP-self-signed-1424909183
!
!
crypto pki certificate chain TP-self-signed-1424909183
 certificate self-signed 01
  30820254 308201BD A0030201 02020101 300D0609 2A864886 F70D0101 04050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 31343234 39303931 3833301E 170D3035 31303238 31333231
  33335A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 34323439
  30393138 3330819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  8100A8AC F40DB795 39A333CA 8EBA789D EE6B0846 88632570 1D128493 4F208598
  BAB97B59 085D4448 3F4DAF9A CB3D7379 D19C6371 776CE323 A87B6EEB 42CAA357
  69785C72 B54B71DD F9E3E09A A6C3D447 60D8D9B7 97800DF2 7DF6804C 4B759A4A
  F2DA84C5 94E96AD2 F8A6933C 4AAB001A C4467CAF 6453E0DA 668CB1FE 51DDF116
  22130203 010001A3 7C307A30 0F060355 1D130101 FF040530 030101FF 30270603
  551D1104 20301E82 1C544845 53554D4D 49542D32 3830312E 696E7369 67687462
  622E636F 6D301F06 03551D23 04183016 80142B8F 2746B275 14EDD765 27DA606E
  E3B16153 BECC301D 0603551D 0E041604 142B8F27 46B27514 EDD76527 DA606EE3
  B16153BE CC300D06 092A8648 86F70D01 01040500 03818100 9186D218 82875A10
  7417405D 8772AEBE 3A5FC511 03E49BA9 FCA4EDD5 39EFC2D4 DFA9F2D9 BC73822F
  F75120EF 1E26FA2A A240D70D B10F32B3 C21928B2 6B44F9C4 D1F95660 5684505C
  1A054EEA 1E71393A 7213D84E C86CE0F4 1BD96EBF CAC724BF 59E1DA43 80C99C58
  A95EF2E0 63D5053A 9C469D0C 93CFA99E 9B90E9E8 5405CE5D
  quit
!
!
class-map match-any AutoQoS-VoIP-RTP-Trust
 match ip dscp ef
class-map match-any AutoQoS-VoIP-Control-Trust
 match ip dscp cs3
 match ip dscp af31
!
!
policy-map AutoQoS-Policy-Trust
 class AutoQoS-VoIP-RTP-Trust
  priority percent 70
 class AutoQoS-VoIP-Control-Trust
  bandwidth percent 5
 class class-default
  fair-queue
!
!
!
crypto isakmp policy 1
 encr 3des
 hash md5
 authentication pre-share
crypto isakmp key $umm1t! address 5.5.5.5
!
!
crypto ipsec transform-set to_vpn esp-3des esp-md5-hmac
!
crypto map to_vpn 10 ipsec-isakmp
 set peer 5.5.5.5
 set security-association lifetime seconds 28800
 set transform-set to_vpn
 match address 101
!
!
!
!
interface FastEthernet0/0
 description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0$
 no ip address
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface FastEthernet0/0.1
 encapsulation dot1Q 1 native
 ip address 2.2.3.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 no snmp trap link-status
!
interface FastEthernet0/0.50
 encapsulation dot1Q 50
 ip address 1.1.2.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 no snmp trap link-status
!
interface FastEthernet0/1
 mac-address 0004.5af7.0479
 bandwidth 384000
 ip address dhcp
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 auto qos voip trust
 crypto map to_vpn
 service-policy output AutoQoS-Policy-Trust
!
ip classless
!
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
ip nat pool mypool 6.6.6.6 6.6.6.6 netmask 255.255.255.0
ip nat inside source route-map nonat pool mypool overload
!
access-list 101 permit ip 2.2.3.0 0.0.0.255 2.2.2.0 0.0.0.255
access-list 101 permit ip 2.2.3.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 101 permit ip 2.2.3.0 0.0.0.255 192.168.3.0 0.0.0.255
access-list 101 permit ip 2.2.3.0 0.0.0.255 192.168.4.0 0.0.0.255
access-list 101 permit ip 2.2.3.0 0.0.0.255 10.100.1.0 0.0.0.255
access-list 101 permit ip 2.2.3.0 0.0.0.255 10.100.2.0 0.0.0.255
access-list 101 permit ip 2.2.3.0 0.0.0.255 10.100.3.0 0.0.0.255
access-list 101 permit ip 1.1.2.0 0.0.0.255 2.2.2.0 0.0.0.255
access-list 101 permit ip 1.1.2.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 101 permit ip 1.1.2.0 0.0.0.255 192.168.3.0 0.0.0.255
access-list 101 permit ip 1.1.2.0 0.0.0.255 192.168.4.0 0.0.0.255
access-list 101 permit ip 1.1.2.0 0.0.0.255 10.100.1.0 0.0.0.255
access-list 101 permit ip 1.1.2.0 0.0.0.255 10.100.2.0 0.0.0.255
access-list 101 permit ip 1.1.2.0 0.0.0.255 10.100.3.0 0.0.0.255
access-list 110 deny   ip 2.2.3.0 0.0.0.255 2.2.2.0 0.0.0.255
access-list 110 deny   ip 2.2.3.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 110 deny   ip 2.2.3.0 0.0.0.255 192.168.3.0 0.0.0.255
access-list 110 deny   ip 2.2.3.0 0.0.0.255 192.168.4.0 0.0.0.255
access-list 110 deny   ip 2.2.3.0 0.0.0.255 10.100.1.0 0.0.0.255
access-list 110 deny   ip 2.2.3.0 0.0.0.255 10.100.2.0 0.0.0.255
access-list 110 deny   ip 2.2.3.0 0.0.0.255 10.100.3.0 0.0.0.255
access-list 110 deny   ip 1.1.2.0 0.0.0.255 2.2.2.0 0.0.0.255
access-list 110 deny   ip 1.1.2.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 110 deny   ip 1.1.2.0 0.0.0.255 192.168.3.0 0.0.0.255
access-list 110 deny   ip 1.1.2.0 0.0.0.255 192.168.4.0 0.0.0.255
access-list 110 deny   ip 1.1.2.0 0.0.0.255 10.100.1.0 0.0.0.255
access-list 110 deny   ip 1.1.2.0 0.0.0.255 10.100.2.0 0.0.0.255
access-list 110 deny   ip 1.1.2.0 0.0.0.255 10.100.3.0 0.0.0.255
access-list 110 permit ip 2.2.3.0 0.0.0.255 any
access-list 110 permit ip 1.1.2.0 0.0.0.255 any
!
route-map nonat permit 10
 match ip address 110
!
!
!
!
control-plane
!
rmon event 33333 log trap AutoQoS description "AutoQoS SNMP traps for Voice Drops" owner AutoQoS
rmon alarm 33333 cbQosCMDropBitRate.1059.1061 30 absolute rising-threshold 1 33333 falling-threshold 0 owner AutoQoS
!
!
voice-port 0/0/0
 timing hookflash-out 500
 caller-id enable
!
voice-port 0/0/1
 timing hookflash-out 500
!
voice-port 0/0/2
!
voice-port 0/0/3
!
voice-port 0/2/0
!
voice-port 0/2/1
!
voice-port 0/2/2
!
voice-port 0/2/3
!
ccm-manager fallback-mgcp
ccm-manager redundant-host 1.1.1.1
ccm-manager mgcp
ccm-manager music-on-hold
ccm-manager config server 1.1.1.2
ccm-manager config
!
mgcp
mgcp call-agent 1.1.1.2 2427 service-type mgcp version 0.1
mgcp dtmf-relay voip codec all mode out-of-band
mgcp rtp unreachable timeout 1000 action notify
mgcp modem passthrough voip mode nse
mgcp package-capability rtp-package
no mgcp package-capability res-package
mgcp package-capability sst-package
no mgcp package-capability fxr-package
mgcp package-capability pre-package
no mgcp timer receive-rtcp
mgcp sdp simple
mgcp fax t38 inhibit
mgcp rtp payload-type g726r16 static
mgcp bind control source-interface FastEthernet0/0.50
mgcp bind media source-interface FastEthernet0/0.50
!
mgcp profile default
!
sccp local FastEthernet0/0.50
sccp ccm 1.1.1.2 priority 1
sccp ccm 1.1.1.1 priority 2
sccp
!
!
dial-peer voice 999000 pots
 service mgcpapp
 port 0/0/0
!
dial-peer voice 999020 pots
 service mgcpapp
 port 0/2/0
!
dial-peer voice 999001 pots
 service mgcpapp
 port 0/0/1
!
dial-peer voice 1 pots
 destination-pattern 9T
 port 0/0/0
!
!
!
call-manager-fallback
 max-conferences 4 gain -6
 ip source-address 1.1.2.1 port 2000
 max-ephones 30
 max-dn 60
 transfer-pattern 24..
 voicemail 95143444
 alias 1 T to 2401
 call-forward busy 2401
 call-forward noan 2401 timeout 20
!
!
line con 0
 password 7 121B0D141B180F0B
 login
line aux 0
line vty 0 4
 password 7 094E460A1016141D
 login
 length 0
 transport input telnet ssh
line vty 5 15
 privilege level 15
 password 7 01110E0752180500
 login
 transport input telnet ssh
!
ntp clock-period 17179864
ntp server 192.5.41.41
ntp server 192.5.41.40
end