Cisco 3825 (revision 1.1) with 487424K/36864K bytes of memory. Cisco IOS Software, 3800 Software (C3825-ADVIPSERVICESK9-M), Version 12.4(9)T1,) -------- router2#show run Building configuration... Current configuration : 15284 bytes ! version 12.4 no service pad service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname router2 ! boot-start-marker boot system flash:/c3825-advipservicesk9-mz.124-20.T.bin boot-end-marker ! card type t1 0 0 card type t1 0 2 card type t1 0 3 logging message-counter syslog logging buffered 25000 no logging console ! no aaa new-model clock timezone PST -8 clock summer-time pdt recurring no network-clock-participate wic 0 no network-clock-participate wic 2 no network-clock-participate wic 3 ! ! crypto pki trustpoint TP-self-signed-3746223354 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-3746223354 revocation-check none rsakeypair TP-self-signed-3746223354 ! ! crypto pki certificate chain TP-self-signed-3746223354 certificate self-signed 01 3082024A quit dot11 syslog no ip source-route ! ! ip cef ! ! no ip bootp server no ip domain lookup ip domain name ncelec.com ip host c3825 192.168.1.1 ip inspect dns-timeout 30 ip inspect name FIREWALL ftp ip inspect name FIREWALL tcp ip inspect name FIREWALL udp ! no ipv6 cef multilink bundle-name authenticated ! ! ! voice-card 0 no dspfarm ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! username qwest privilege 15 secret 5 $1$SgbD$PPitCeH5W2ly1sXGLV7lK/ username nceadmin privilege 15 secret 5 $1$h0bG$nA/IhZgHPn2whqgtJabZ/0 ! ! crypto isakmp policy 10 hash md5 authentication pre-share lifetime 14400 crypto isakmp key ohms address 209.165.1.18 crypto isakmp key bullride address 209.165.2.194 ! ! crypto ipsec transform-set NCE esp-des esp-md5-hmac mode transport ! crypto map NCE local-address GigabitEthernet0/0 crypto map NCE 15 ipsec-isakmp set peer 209.165.2.194 set transform-set NCE match address 115 crypto map NCE 51 ipsec-isakmp set peer 209.165.1.18 set transform-set NCE match address 151 ! archive log config hidekeys ! ! controller T1 0/0/0 framing esf linecode b8zs cablelength long 0db channel-group 0 timeslots 1-24 ! controller T1 0/0/1 framing esf linecode b8zs cablelength long 0db channel-group 0 timeslots 1-24 ! controller T1 0/2/0 framing esf linecode b8zs cablelength long 0db channel-group 0 timeslots 1-24 ! controller T1 0/2/1 framing esf linecode b8zs cablelength long 0db channel-group 0 timeslots 1-24 ! controller T1 0/3/0 framing esf linecode b8zs cablelength long 0db channel-group 0 timeslots 1-24 ! controller T1 0/3/1 framing esf linecode b8zs cablelength long 0db channel-group 0 timeslots 1-24 ! ! ! ! ! interface Tunnel2 ip address 192.168.115.1 255.255.255.252 ip mtu 1400 no ip route-cache cef no ip mroute-cache tunnel source 65.1.1.1 tunnel destination 209.165.2.194 ! interface Tunnel1 ip address 192.168.51.1 255.255.255.252 ip mtu 1400 no ip route-cache cef no ip mroute-cache tunnel source 65.1.1.1 tunnel destination 209.165.1.18 crypto map NCE ! interface Multilink1 ip address 65.1.24.66 255.255.255.252 ppp multilink ppp multilink group 1 ppp multilink fragment disable crypto map NCE ! interface GigabitEthernet0/0 description Internet Interface ip address 65.1.1.1 255.255.255.0 no ip redirects no ip unreachables duplex full speed 100 media-type rj45 ! interface GigabitEthernet0/1 description DMZ Interface ip address 172.16.98.1 255.255.255.0 duplex full speed 100 media-type rj45 ! interface Serial0/0/0:0 description Qwest 74/HCGS/480833//PN adtran:18 no ip address encapsulation ppp no ip route-cache cef no ip route-cache ppp multilink ppp multilink group 1 crypto map NCE ! interface Serial0/0/1:0 description Qwest 74/HCGS/480834//PN adtran:19 no ip address encapsulation ppp no ip route-cache cef no ip route-cache ppp multilink ppp multilink group 1 crypto map NCE ! interface Serial0/2/0:0 description first T1 in MLPPP bundle no ip address encapsulation ppp no ip route-cache cef no ip route-cache ppp multilink ppp multilink group 1 crypto map NCE ! interface Serial0/2/1:0 description second T1 in MLPPP bundle no ip address encapsulation ppp no ip route-cache cef no ip route-cache ppp multilink ppp multilink group 1 crypto map NCE ! interface Serial0/3/0:0 description second T1 in MLPPP bundle no ip address encapsulation ppp no ip route-cache cef no ip route-cache ppp multilink ppp multilink group 1 crypto map NCE ! interface Serial0/3/1:0 description second T1 in MLPPP bundle no ip address encapsulation ppp no ip route-cache cef no ip route-cache ppp multilink ppp multilink group 1 crypto map NCE ! router ospf 1 log-adjacency-changes redistribute static subnets network 172.16.50.0 0.0.0.255 area 0 network 172.16.51.0 0.0.0.255 area 0 network 172.16.98.0 0.0.0.255 area 0 network 192.168.1.1 0.0.0.0 area 0 network 192.168.15.1 0.0.0.0 area 0 network 192.168.50.1 0.0.0.0 area 0 network 192.168.51.1 0.0.0.0 area 0 network 192.168.115.1 0.0.0.0 area 0 ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 65.112.24.65 ip route 10.0.50.0 255.255.255.0 172.16.98.2 ip route 10.0.98.0 255.255.255.0 172.16.98.2 ip route 10.0.150.0 255.255.255.0 172.16.98.2 ip route 10.1.1.0 255.255.255.0 172.16.98.2 ip route 172.16.3.0 255.255.255.0 172.16.98.2 ip route 172.16.4.0 255.255.255.0 172.16.98.2 ip route 172.16.5.0 255.255.255.0 172.16.98.2 ip route 172.16.11.0 255.255.255.0 172.16.98.2 ip route 172.16.15.0 255.255.255.0 172.16.98.2 ip route 172.16.20.0 255.255.255.0 172.16.98.2 ip route 172.16.21.0 255.255.255.0 172.16.98.2 ip route 172.16.22.0 255.255.255.0 172.16.98.2 ip route 172.16.28.0 255.255.255.0 172.16.98.2 ip route 172.16.30.0 255.255.255.0 172.16.98.2 ip route 172.16.31.0 255.255.255.0 172.16.98.2 ip route 172.16.32.0 255.255.255.0 172.16.98.2 ip route 172.16.33.0 255.255.255.0 172.16.98.2 ip route 172.16.34.0 255.255.255.0 172.16.98.2 ip route 172.16.35.0 255.255.255.0 172.16.98.2 ip route 172.16.36.0 255.255.255.0 172.16.98.2 ip route 172.16.37.0 255.255.255.0 172.16.98.2 ip route 172.16.67.0 255.255.255.0 172.16.98.2 ip route 172.16.68.0 255.255.255.0 172.16.98.2 ip route 172.16.70.0 255.255.255.0 172.16.98.2 ip route 172.16.77.0 255.255.255.0 172.16.98.2 ip route 172.16.93.0 255.255.255.0 172.16.98.2 ip route 172.17.12.0 255.255.255.0 172.16.98.2 ip route 172.17.13.0 255.255.255.0 172.16.98.2 ip route 172.17.14.0 255.255.255.0 172.16.98.2 ip route 172.17.40.0 255.255.255.0 172.16.98.2 ip route 172.18.0.0 255.255.0.0 172.16.98.2 ip route 172.20.20.0 255.255.255.0 172.16.98.2 ip route 172.20.98.0 255.255.255.0 172.16.98.2 ip route 172.20.198.0 255.255.255.0 172.16.98.2 ip route 172.21.50.0 255.255.255.0 172.16.98.2 ip route 192.168.3.0 255.255.255.0 172.16.98.2 ip route 192.168.7.0 255.255.255.0 172.16.98.2 ip route 192.168.18.0 255.255.255.0 65.112.31.2 ip route 192.168.20.0 255.255.255.0 172.16.98.2 ip route 192.168.32.0 255.255.255.0 172.16.98.2 ip route 192.168.98.0 255.255.255.0 172.16.98.2 ip route 192.168.99.0 255.255.255.0 172.16.98.2 no ip http server ip http access-class 23 ip http authentication local ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ! ! ! access-list 1 permit 172.16.98.0 0.0.0.255 access-list 1 permit 199.238.59.0 0.0.0.255 access-list 1 permit 65.112.31.0 0.0.0.255 access-list 1 permit 172.16.0.0 0.0.0.255 access-list 1 permit 172.30.0.0 0.0.0.255 access-list 1 permit 172.30.1.0 0.0.0.255 access-list 1 permit 192.168.168.0 0.0.0.255 access-list 1 permit 10.0.98.0 0.0.0.255 access-list 1 permit 192.168.98.0 0.0.0.255 access-list 1 permit 172.20.98.0 0.0.0.255 access-list 1 permit 192.168.7.0 0.0.0.255 access-list 1 permit 172.18.0.0 0.0.0.255 access-list 1 permit 10.0.50.0 0.0.0.255 access-list 1 permit 10.0.150.0 0.0.0.255 access-list 1 permit 192.168.3.0 0.0.0.255 access-list 1 permit 192.168.99.0 0.0.0.255 access-list 4 permit 199.238.59.0 0.0.0.255 access-list 10 permit 204.147.87.98 access-list 10 permit 199.238.59.0 0.0.0.255 access-list 10 permit 10.0.98.0 0.0.0.255 access-list 10 permit 192.168.98.0 0.0.0.255 access-list 10 permit 192.168.7.0 0.0.0.255 access-list 10 permit 10.0.50.0 0.0.0.255 access-list 10 permit 10.0.150.0 0.0.0.255 access-list 10 permit 172.21.50.0 0.0.0.255 access-list 10 permit 172.20.198.0 0.0.0.255 access-list 10 permit 192.168.3.0 0.0.0.255 access-list 10 permit 192.168.99.0 0.0.0.255 access-list 23 permit 65.112.31.0 0.0.0.255 access-list 98 permit 199.238.59.0 0.0.0.255 access-list 98 permit 172.16.0.0 0.0.255.255 access-list 98 permit 172.17.0.0 0.0.255.255 access-list 98 permit 172.30.0.0 0.0.0.255 access-list 98 permit 172.30.1.0 0.0.0.255 access-list 98 permit 192.168.168.0 0.0.0.255 access-list 98 permit 10.0.98.0 0.0.0.255 access-list 98 permit 192.168.98.0 0.0.0.255 access-list 98 permit 172.120.98.0 0.0.0.255 access-list 98 permit 192.168.7.0 0.0.0.255 access-list 98 permit 172.0.0.0 0.255.255.255 access-list 98 permit 172.18.0.0 0.0.255.255 access-list 98 permit 10.0.50.0 0.0.0.255 access-list 98 permit 10.0.150.0 0.0.0.255 access-list 98 permit 172.21.50.0 0.0.0.255 access-list 98 permit 172.20.198.0 0.0.0.255 access-list 98 permit 192.168.3.0 0.0.0.255 access-list 98 permit 192.168.99.0 0.0.0.255 access-list 115 permit gre host 65.1.1.1 host 209.165.2.194 access-list 150 permit gre host 65.1.1.1 host 209.165.168.10 access-list 151 permit gre host 65.1.1.1 host 209.165.1.18 access-list 152 permit ip host 65.1.1.1 host 63.172.112.150 access-list 152 permit gre host 65.1.1.1 host 63.172.112.150 access-list 152 permit ip host 199.238.59.25 host 172.30.1.1 access-list 152 permit ip host 199.238.59.44 host 172.30.1.1 access-list 152 permit ip host 199.238.59.45 host 172.30.1.1 access-list 152 permit ip host 199.238.59.8 host 172.30.1.1 access-list 152 permit ip host 199.238.59.3 host 172.30.1.1 access-list 152 permit ip host 192.168.1.14 host 172.30.1.1 access-list 153 permit ip host 65.1.1.1 host 65.121.47.2 access-list 153 permit gre host 65.1.1.1 host 65.121.47.2 access-list 153 permit ip host 199.238.59.25 host 192.168.168.1 access-list 153 permit ip host 199.238.59.44 host 192.168.168.1 access-list 153 permit ip host 199.238.59.45 host 192.168.168.1 access-list 153 permit ip host 199.238.59.8 host 192.168.168.1 access-list 153 permit ip host 199.238.59.3 host 192.168.168.1 access-list 153 permit ip host 192.168.1.14 host 192.168.168.1 scheduler allocate 20000 1000 end