sh run Building configuration... Current configuration : 19898 bytes ! ! No configuration change since last restart ! version 12.3 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname KHI-FTC-RO-C-A8M1-01 ! boot-start-marker boot system flash:c3825-adventerprisek9-mz.123-14.T7.bin boot-end-marker ! logging buffered 51200 warnings enable secret 5 $1$.ywe$ZeTTLza9VqORIBa7exDaS/ ! no aaa new-model ! resource policy ! --More--  clock timezone GMT 5 network-clock-participate wic 0 no network-clock-participate wic 1 ip subnet-zero ip cef ip tcp intercept connection-timeout 3600 ! ! no ip dhcp use vrf connected ! ! no ip domain lookup ip domain name dewangroup.com.pk ip name-server 10.0.0.19 ip name-server 172.16.17.5 no ip ips deny-action ips-interface ip sla monitor 1 type http operation get url http://64.233.187.99 ip sla monitor schedule 1 life forever start-time now ! no ftp-server write-enable isdn switch-type primary-net5 voice-card 0 --More--   dspfarm dsp services dspfarm ! ! ! voice call send-alert voice rtp send-recv voice disc-pi-incoming-on ! ! ! ! voice class h323 1 h225 timeout tcp establish 5 ! ! ! ! ! ! ! ! crypto pki trustpoint TP-self-signed-903138931 --More--   enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-903138931 revocation-check none rsakeypair TP-self-signed-903138931 ! ! crypto pki certificate chain TP-self-signed-903138931 certificate self-signed 01 3082025E 308201C7 A0030201 02020101 300D0609 2A864886 F70D0101 04050030 30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274 69666963 6174652D 39303331 33383933 31301E17 0D303630 34303531 34313631 305A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F 532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3930 33313338 39333130 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100 B0CA2C6D 066F4E46 B726967F 408D7B05 70B832AE 3A9FD463 BCFF6E6F AB99A04D B92D9A84 93FE9491 36AF4427 70768EEF 85AB5B34 4C18062A A3550193 DDBDD07E ED3FBDC7 A51E3514 6129CD6D B195CD76 5FE672E7 3A9A3D69 D5A4554B F5A2A4E2 7EC93078 BC9F81C6 C8D9BC6E 4F016E77 59356AE7 1F7FBAF5 FB859853 2B132FA1 02030100 01A38187 30818430 0F060355 1D130101 FF040530 030101FF 30310603 551D1104 2A302882 264B4849 2D465443 2D524F2D 432D4138 4D312D30 312E6465 77616E67 726F7570 2E636F6D 2E706B30 1F060355 1D230418 30168014 2CE9143D 83A60551 FBA28513 9AB4681E 9609CD68 301D0603 551D0E04 1604142C E9143D83 A60551FB A285139A B4681E96 09CD6830 0D06092A 864886F7 0D010104 05000381 --More--   81007435 D15AC387 69A847B4 3EED7C5F 5F863040 D172C288 961CDB1E 0E4284AA 05C6A7BC 6F28DEFA 36D107B0 278605A9 85C729F7 7B3EDC37 CDD380B8 916DD749 B8BD2707 C41F194B C4F979C1 0F8E2D1D 0BB77F73 6AA11145 A8390AC8 6A9CDB00 F54577B8 D9C270C6 073A7D37 F20C673D B9B8E882 C6218996 01ADFA71 06894414 4767 quit username cisco privilege 15 secret 5 $1$apob$QzI4nRZMKzTr9ebvQB0d9. ! ! controller E1 0/0/0 pri-group timeslots 1-31 ! controller E1 0/0/1 pri-group timeslots 1-31 ! controller E1 0/1/0 channel-group 0 unframed ! controller E1 0/1/1 channel-group 0 unframed ! track 1 rtr 1 delay down 80 up 180 ! ! ! ! crypto isakmp policy 10 hash md5 --More--   authentication pre-share crypto isakmp key 6 cisco123 address 203.82.55.106 255.255.255.252 no crypto isakmp ccm ! ! crypto ipsec transform-set yo esp-des esp-md5-hmac ! crypto map pix 10 ipsec-isakmp set peer 203.82.55.106 set transform-set yo match address 104 ! ! ! ! interface GigabitEthernet0/0 description **** Link To KHI-FTC-SW-A8M1-01 **** ip address 10.0.0.93 255.255.0.0 ip accounting output-packets ip accounting access-violations ip nat inside ip virtual-reassembly duplex auto --More--   speed auto media-type rj45 negotiation auto glbp 10 ip 10.0.0.96 glbp 10 weighting 80 glbp 10 load-balancing weighted glbp 10 authentication text test glbp 10 weighting track 1 decrement 1 ! interface GigabitEthernet0/1 description **** Link To Supernet **** bandwidth 1000 ip address 203.130.2.164 255.255.255.248 ip access-group in-for-supernet in ip access-group out-for-supernet out ip accounting output-packets ip nat outside ip virtual-reassembly no ip route-cache cef no ip route-cache duplex auto speed auto media-type rj45 --More--   negotiation auto crypto map pix ! ip classless ip route 0.0.0.0 0.0.0.0 203.130.2.161 ip route 10.2.0.0 255.255.0.0 172.16.15.30 ip route 10.2.0.0 255.255.0.0 10.1.0.2 2 ip route 10.3.0.0 255.255.0.0 10.0.0.95 ip route 190.190.0.0 255.255.0.0 203.82.55.106 ! ! ip http server ip http authentication local ip http secure-server ip nat translation timeout 80 ip nat pool real 203.130.2.164 203.130.2.165 netmask 255.255.255.248 ip nat inside source list 3 pool real overload ip nat inside source list 102 pool real overload ip nat inside source static tcp 10.0.0.154 25 203.130.2.163 25 extendable ip nat inside source static tcp 10.0.0.142 80 203.130.2.163 80 extendable ip nat inside source static tcp 10.0.0.142 110 203.130.2.163 110 extendable ip nat inside source static tcp 10.0.0.142 1352 203.130.2.163 1352 extendable ip nat inside source static tcp 10.0.0.143 1533 203.130.2.163 1533 extendable ip nat inside source static tcp 10.0.0.18 80 203.130.2.163 8089 extendable ip nat inside source static 10.0.0.143 203.130.2.164 ! ip access-list extended in-for-supernet permit udp any any eq isakmp permit esp any any deny tcp any any eq 445 permit tcp any host 203.130.2.163 eq smtp permit tcp any host 203.130.2.163 eq www permit tcp any host 203.130.2.163 eq pop3 permit tcp any host 203.130.2.163 eq 1352 permit tcp any host 203.130.2.163 eq 8089 permit tcp any host 203.130.2.163 eq 7779 permit tcp any host 203.130.2.163 eq 1811 permit tcp any host 203.130.2.164 eq www deny udp any any eq netbios-ns deny udp any any eq netbios-dgm deny udp any any eq netbios-ss deny tcp any any eq 137 deny tcp any any eq 138 deny tcp any any eq 139 deny tcp any any eq 135 deny tcp any any eq 4444 deny udp any any eq 4444 deny udp any any eq 1434 deny udp any any eq 1433 deny tcp any any eq 1434 deny tcp any any eq 1433 deny tcp any any eq 5367 permit ip host 203.82.55.106 any permit tcp any host 203.130.2.163 eq 1533 evaluate tcptraffic ! ip access-list extended out-for-supernet permit udp any any eq isakmp permit esp any any permit tcp any any reflect tcptraffic permit udp any any reflect tcptraffic ! KHI-FTC-RO-C-A8M1-01# KHI-FTC-RO-C-A8M1-01#