sh run Building configuration... Current configuration : 15710 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname HUB2 ! boot-start-marker boot-end-marker ! logging buffered 51200 warnings ! aaa new-model ! ! aaa authentication login default local aaa authorization exec default local ! ! aaa session-id common clock timezone Paris 1 clock summer-time Paris date Mar 30 2003 2:00 Oct 26 2003 3:00 dot11 syslog ! ! ip cef ! ! ip domain name BETEREM ip name-server 194.2.0.20 ! multilink bundle-name authenticated parameter-map type protocol-info msn-servers server name messenger.hotmail.com server name gateway.messenger.hotmail.com server name webmessenger.msn.com parameter-map type protocol-info aol-servers server name login.oscar.aol.com server name toc.oscar.aol.com server name oam-d09a.blue.aol.com parameter-map type protocol-info yahoo-servers server name scs.msg.yahoo.com server name scsa.msg.yahoo.com server name scsb.msg.yahoo.com server name scsc.msg.yahoo.com server name scsd.msg.yahoo.com server name cs16.msg.dcn.yahoo.com server name cs19.msg.dcn.yahoo.com server name cs42.msg.dcn.yahoo.com server name cs53.msg.dcn.yahoo.com server name cs54.msg.dcn.yahoo.com server name ads1.vip.scd.yahoo.com server name radio1.launch.vip.dal.yahoo.com server name in1.msg.vip.re2.yahoo.com server name data1.my.vip.sc5.yahoo.com server name address1.pim.vip.mud.yahoo.com server name edit.messenger.yahoo.com server name messenger.yahoo.com server name http.pager.yahoo.com server name privacy.yahoo.com server name csa.yahoo.com server name csb.yahoo.com server name csc.yahoo.com ! ! crypto pki trustpoint TP-self-signed-1498565695 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-1498565695 revocation-check none rsakeypair TP-self-signed-1498565695 ! ! crypto pki certificate chain TP-self-signed-1498565695 certificate self-signed 01 30820249 308201B2 A0030201 02020101 300D0609 2A864886 F70D0101 04050030 31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 69666963 6174652D 31343938 35363536 3935301E 170D3039 30383130 31313032 30385A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 34393835 36353639 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 8100F5A3 DD64C1F2 A3D839BC 3478B32C 627189AE 1ABD9341 25116D8A 7E351949 0B70EBEC 92920F35 D468593E FD6E72BA F0D93C65 EE9FC329 9C4430C8 1193B878 2AB611A8 E506E881 F814D192 C61FB833 1F69B8F2 179BFB44 CEE7EEA1 92B98FF7 E03AE980 94AA63F6 1786A91B DE542864 2CC53522 1E6A0356 466350DB 81C80296 CAED0203 010001A3 71306F30 0F060355 1D130101 FF040530 030101FF 301C0603 551D1104 15301382 1152746D 6172732D 30322E42 45544552 454D301F 0603551D 23041830 16801490 13D63630 69C1EA72 05FCA2ED 3C965091 6EE9D130 1D060355 1D0E0416 04149013 D6363069 C1EA7205 FCA2ED3C 9650916E E9D1300D 06092A86 4886F70D 01010405 00038181 00367C87 872B7B16 CBC0F780 507447E5 04B05061 56584FD1 249A4FF0 A67C440C 25279FC6 88D53901 23E823A2 7E2317B9 47B289D9 0AFE82E5 A4EF36F8 651824CC 969AA1AE 3D34912E 5C26155A 9C38D75F 0DA65FB2 1989BF8D F71943C5 0CD011B0 0AC63E7D AB370169 254C1149 B2482165 99F3A1B7 3C66840C 0EFCEF8F FFE566E4 7B quit ! ! username XXXXX privilege 15 secret 5 XXXXXX archive log config hidekeys ! ! crypto isakmp policy 5 authentication pre-share group 2 crypto isakmp key XXXXX address 0.0.0.0 0.0.0.0 ! ! crypto ipsec transform-set dmvpnset esp-3des esp-sha-hmac mode transport crypto ipsec transform-set dmvpnset2 esp-3des esp-sha-hmac mode transport ! crypto ipsec profile dmvpnpoc set transform-set dmvpnset ! crypto ipsec profile dmvpnpoc2 set transform-set dmvpnset2 ! ! ! ! ! class-map type inspect match-any SDM_HTTPS match access-group name SDM_HTTPS class-map type inspect match-any SDM_SSH match access-group name SDM_SSH class-map type inspect match-any SDM_SHELL match access-group name SDM_SHELL class-map type inspect match-any sdm-cls-access match class-map SDM_HTTPS match class-map SDM_SSH match class-map SDM_SHELL class-map type inspect imap match-any ccp-app-imap match invalid-command class-map type inspect match-any ccp-cls-protocol-p2p match protocol edonkey signature match protocol gnutella signature match protocol kazaa2 signature match protocol fasttrack signature match protocol bittorrent signature class-map type inspect match-any CCP-Voice-permit match protocol h323 match protocol skinny match protocol sip class-map type inspect match-any ccp-cls-insp-traffic match protocol cuseeme match protocol dns match protocol ftp match protocol h323 match protocol https match protocol icmp match protocol imap match protocol pop3 match protocol netshow match protocol shell match protocol realmedia match protocol rtsp match protocol smtp extended match protocol sql-net match protocol streamworks match protocol tftp match protocol vdolive match protocol tcp match protocol udp class-map type inspect match-all ccp-insp-traffic match class-map ccp-cls-insp-traffic class-map type inspect gnutella match-any ccp-app-gnutella match file-transfer class-map type inspect msnmsgr match-any ccp-app-msn-otherservices match service any class-map type inspect ymsgr match-any ccp-app-yahoo-otherservices match service any class-map type inspect match-any ccp-cls-icmp-access match protocol icmp match protocol tcp match protocol udp class-map type inspect match-any ccp-cls-protocol-im match protocol ymsgr yahoo-servers match protocol msnmsgr msn-servers match protocol aol aol-servers class-map type inspect aol match-any ccp-app-aol-otherservices match service any class-map type inspect match-all ccp-protocol-pop3 match protocol pop3 class-map type inspect pop3 match-any ccp-app-pop3 match invalid-command class-map type inspect match-all sdm-access match class-map sdm-cls-access match access-group 101 class-map type inspect kazaa2 match-any ccp-app-kazaa2 match file-transfer class-map type inspect match-all ccp-protocol-p2p match class-map ccp-cls-protocol-p2p class-map type inspect msnmsgr match-any ccp-app-msn match service text-chat class-map type inspect ymsgr match-any ccp-app-yahoo match service text-chat class-map type inspect match-all ccp-protocol-im match class-map ccp-cls-protocol-im class-map type inspect match-all ccp-invalid-src match access-group 100 class-map type inspect match-all ccp-icmp-access match class-map ccp-cls-icmp-access class-map type inspect http match-any ccp-app-httpmethods match request method bcopy match request method bdelete match request method bmove match request method bpropfind match request method bproppatch match request method connect match request method copy match request method delete match request method edit match request method getattribute match request method getattributenames match request method getproperties match request method index match request method lock match request method mkcol match request method mkdir match request method move match request method notify match request method options match request method poll match request method propfind match request method proppatch match request method put match request method revadd match request method revlabel match request method revlog match request method revnum match request method save match request method search match request method setattribute match request method startrev match request method stoprev match request method subscribe match request method trace match request method unedit match request method unlock match request method unsubscribe class-map type inspect edonkey match-any ccp-app-edonkey match file-transfer match text-chat match search-file-name class-map type inspect http match-any ccp-http-blockparam match request port-misuse im match request port-misuse p2p match req-resp protocol-violation class-map type inspect edonkey match-any ccp-app-edonkeydownload match file-transfer class-map type inspect match-all ccp-protocol-imap match protocol imap class-map type inspect aol match-any ccp-app-aol match service text-chat class-map type inspect edonkey match-any ccp-app-edonkeychat match search-file-name match text-chat class-map type inspect http match-any ccp-http-allowparam match request port-misuse tunneling class-map type inspect match-all ccp-protocol-http match protocol http class-map type inspect fasttrack match-any ccp-app-fasttrack match file-transfer ! ! policy-map type inspect ccp-permit-icmpreply class type inspect ccp-icmp-access inspect class class-default pass policy-map type inspect p2p ccp-action-app-p2p class type inspect edonkey ccp-app-edonkeychat log allow class type inspect edonkey ccp-app-edonkeydownload log allow class type inspect fasttrack ccp-app-fasttrack log allow class type inspect gnutella ccp-app-gnutella log allow class type inspect kazaa2 ccp-app-kazaa2 log allow class class-default policy-map type inspect im ccp-action-app-im class type inspect aol ccp-app-aol log allow class type inspect msnmsgr ccp-app-msn log allow class type inspect ymsgr ccp-app-yahoo log allow class type inspect aol ccp-app-aol-otherservices log reset class type inspect msnmsgr ccp-app-msn-otherservices log reset class type inspect ymsgr ccp-app-yahoo-otherservices log reset class class-default policy-map type inspect http ccp-action-app-http class type inspect http ccp-http-blockparam log reset class type inspect http ccp-app-httpmethods log reset class type inspect http ccp-http-allowparam log allow class class-default policy-map type inspect imap ccp-action-imap class type inspect imap ccp-app-imap log class class-default policy-map type inspect pop3 ccp-action-pop3 class type inspect pop3 ccp-app-pop3 log class class-default policy-map type inspect ccp-inspect class type inspect ccp-invalid-src drop log class type inspect ccp-protocol-http inspect service-policy http ccp-action-app-http class type inspect ccp-protocol-imap inspect service-policy imap ccp-action-imap class type inspect ccp-protocol-pop3 inspect service-policy pop3 ccp-action-pop3 class type inspect ccp-protocol-p2p inspect service-policy p2p ccp-action-app-p2p class type inspect ccp-protocol-im inspect service-policy im ccp-action-app-im class type inspect ccp-insp-traffic inspect class type inspect CCP-Voice-permit inspect class class-default pass policy-map type inspect ccp-permit class type inspect sdm-access inspect class class-default ! zone security out-zone zone security in-zone zone-pair security ccp-zp-self-out source self destination out-zone service-policy type inspect ccp-permit-icmpreply zone-pair security ccp-zp-in-out source in-zone destination out-zone service-policy type inspect ccp-inspect zone-pair security ccp-zp-out-self source out-zone destination self service-policy type inspect ccp-permit ! ! ! interface Tunnel0 description MULTI-POINT GRE TUNNEL for BRANCHES bandwidth 1000 ip address 192.168.242.101 255.255.255.0 no ip redirects ip mtu 1400 ip nhrp authentication ???? ip nhrp map multicast dynamic ip nhrp network-id 100001 ip nhrp holdtime 600 no ip split-horizon eigrp 1 no ip mroute-cache delay 1000 tunnel source Dialer0 tunnel mode gre multipoint tunnel key 100001 tunnel protection ipsec profile dmvpnpoc ! interface Tunnel1 description MULTI-POINT GRE TUNNEL for BRANCHES bandwidth 1000 ip address 192.168.4.102 255.255.255.0 no ip redirects ip mtu 1400 ip nhrp authentication ????? ip nhrp map multicast dynamic ip nhrp network-id 100002 ip nhrp holdtime 600 no ip split-horizon eigrp 1 no ip mroute-cache delay 1050 tunnel source Dialer0 tunnel mode gre multipoint tunnel key 100002 tunnel protection ipsec profile dmvpnpoc2 ! interface FastEthernet0/0 description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0/0$ no ip address ip tcp adjust-mss 1412 shutdown duplex auto speed auto ! interface FastEthernet0/1 description $ETH-WAN$ no ip address duplex auto speed auto pppoe enable group global pppoe-client dial-pool-number 1 ! interface FastEthernet0/0/0 ! interface FastEthernet0/0/1 ! interface FastEthernet0/0/2 ! interface FastEthernet0/0/3 ! interface Vlan1 description $FW_INSIDE$ ip address 192.168.100.252 255.255.255.0 ip nat inside ip virtual-reassembly ip tcp adjust-mss 1412 no glbp 10 load-balancing ! interface Dialer0 description $FW_OUTSIDE$ ip address negotiated ip access-group 108 in ip mtu 1452 ip nat outside ip virtual-reassembly encapsulation ppp dialer pool 1 dialer-group 1 ppp authentication chap pap callin ppp chap hostname XXXXX ppp chap password 0 XXXXXX ppp pap sent-username XXXXXX password 0 XXXXX ! router eigrp 1 network 192.168.4.0 network 192.168.100.0 network 192.168.242.0 no auto-summary ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 Dialer0 ! ! ip http server ip http access-class 23 ip http authentication local ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ip nat inside source list 1 interface Dialer0 overload ip nat inside source list 110 interface FastEthernet0/1 overload ! ip access-list extended SDM_HTTPS remark CCP_ACL Category=1 permit tcp any any eq 443 ip access-list extended SDM_SHELL remark CCP_ACL Category=1 permit tcp any any eq cmd ip access-list extended SDM_SSH remark CCP_ACL Category=1 permit tcp any any eq 22 ! access-list 1 remark INSIDE_IF=Vlan1 access-list 1 remark CCP_ACL Category=2 access-list 1 permit 192.168.100.0 0.0.0.255 access-list 23 permit 10.10.10.0 0.0.0.7 access-list 23 permit 192.168.100.0 0.0.0.255 access-list 100 remark CCP_ACL Category=128 access-list 100 permit ip host 255.255.255.255 any access-list 100 permit ip 127.0.0.0 0.255.255.255 any access-list 101 remark CCP_ACL Category=128 access-list 101 permit ip 212.234.49.0 0.0.0.255 any access-list 101 permit ip host 193.251.87.204 any access-list 108 permit ip any any access-list 108 permit esp any any access-list 108 permit gre any any access-list 108 permit icmp any any access-list 110 permit ip 10.10.10.0 0.0.0.255 any dialer-list 1 protocol ip permit ! ! ! ! control-plane ! banner exec ^C % Password expiration warning. ----------------------------------------------------------------------- Cisco Router and Security Device Manager (SDM) is installed on this device and it provides the default username "cisco" for one-time use. If you have already used the username "cisco" to login to the router and your IOS image supports the "one-time" user option, then this username has already expired. You will not be able to login to the router with this username after you exit this session. It is strongly suggested that you create a new username with a privilege level of 15 using the following command. username privilege 15 secret 0 Replace and with the username and password you want to use. ----------------------------------------------------------------------- ^C banner login ^C ----------------------------------------------------------------------- uthorized access only! Disconnect IMMEDIATELY if you are not an authorized user! ----------------------------------------------------------------------- ^C ! line con 0 line aux 0 line vty 0 4 transport input telnet ssh line vty 5 15 transport input telnet ssh ! scheduler allocate 20000 1000 ! end Rtmars-02#