------------------ show running-config ------------------


Building configuration...

Current configuration : 29360 bytes
!
upgrade fpd auto
upgrade fpd path sup-bootdisk:
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
service internal
service counters max age 5
!
hostname 6500_1
!
boot system flash sup-bootdisk:
enable password <removed>
!
username warnesj privilege 15 secret 5 <removed>
aaa new-model
aaa authentication login default local
aaa authorization exec default local 
!
aaa session-id common
clock timezone UTC -6
firewall multiple-vlan-interfaces
firewall module 13 vlan-group 10
firewall vlan-group 10 50,60-62
ip subnet-zero
!
!
!
ip vrf CNET_VRF_1
 rd 200:1
 route-target export 200:1
 route-target import 200:1
!
no ip domain-lookup
ipv6 mfib hardware-switching replication-mode ingress
!
ssp group 10
 remote 172.25.254.218
 redundancy CNET_PUB
 redundancy CNET_PRV
vtp mode transparent
mls ip multicast flow-stat-timer 9
no mls flow ip
no mls flow ipv6
no mls qos rewrite ip dscp
no mls acl tcam share-global
mls cef error action freeze
!
!
crypto engine mode vrf
!
!
!
!
!
!
redundancy
 mode sso
 main-cpu
  auto-sync running-config
!
spanning-tree mode mst
spanning-tree portfast default
spanning-tree portfast bpduguard default
spanning-tree extend system-id
no spanning-tree vlan 1
diagnostic cns publish cisco.cns.device.diag_results
diagnostic cns subscribe cisco.cns.device.diag_commands
fabric buffer-reserve queue
!
vlan internal allocation policy ascending
vlan access-log ratelimit 2000
!
vlan 40-41,50,60-62,999 
! 
crypto keyring CNET_KEYRING vrf CNET_VRF_1
  description Site 1 C-Net VRF Keyring
  pre-shared-key address 172.24.253.53 key <removed>
no crypto xauth 
!
crypto isakmp policy 10
 encr aes 256
 authentication pre-share
 group 2
 lifetime 28800
!
crypto isakmp policy 20
 encr aes 256
 hash md5
 authentication pre-share
 group 2
 lifetime 28800
!
crypto isakmp policy 30
 authentication pre-share
 group 2
 lifetime 28800
!
crypto isakmp policy 40
 hash md5
 authentication pre-share
 group 2
 lifetime 28800
crypto isakmp ssp 10
!
crypto isakmp profile CNET_ISAKMP_PROFILE
   description Site 1 C-Net ISAKMP Profile
   vrf CNET_VRF_1
   keyring CNET_KEYRING
   self-identity address
   match identity address 172.24.253.53 255.255.255.255 
   keepalive 60 retry 5
!
!
crypto ipsec transform-set ESP-AES-256-MD5 esp-aes 256 esp-md5-hmac 
crypto ipsec transform-set ESP-AES-256-SHA esp-aes 256 esp-sha-hmac 
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac 
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac 
!
crypto ipsec profile CNET_IPSEC_PROFILE
 set transform-set ESP-AES-256-MD5 ESP-AES-256-SHA ESP-DES-MD5 ESP-DES-SHA 
 set isakmp-profile CNET_ISAKMP_PROFILE
!
!
crypto map CNET_CRYPTO_MAP ha replay-interval inbound 10 outbound 10
crypto map CNET_CRYPTO_MAP local-address GigabitEthernet1/3
crypto map CNET_CRYPTO_MAP isakmp-profile CNET_ISAKMP_PROFILE
crypto map CNET_CRYPTO_MAP 10 ipsec-isakmp 
 set peer 172.24.253.53
 set transform-set ESP-DES-SHA 
 set pfs group2
 set isakmp-profile CNET_ISAKMP_PROFILE
 match address ACL_S_H_VPN
!
!
!
interface Port-channel1
 description Etherchannel Uplink to 8600
 switchport
 no ip address
!
interface GigabitEthernet1/1
 description To C-Net Router
 switchport
 switchport access vlan 40
 switchport mode access
 no ip address
!
interface GigabitEthernet1/2
 description C-Net Public Interface
 switchport
 switchport access vlan 40
 switchport mode access
 no ip address
!
interface GigabitEthernet1/3
 description C-Net Public Interface
 ip address 172.25.254.219 255.255.255.248
 standby 10 ip 172.25.254.217
 standby 10 preempt
 standby 10 authentication CNET_PUB
 standby 10 name CNET_PUB
 standby 10 track GigabitEthernet1/1
 standby 10 track GigabitEthernet1/2
 standby 10 track Vlan41
 standby 10 track Vlan50
 crypto engine subslot 12/0
!
interface GigabitEthernet1/4
 no ip address
 shutdown
!
interface GigabitEthernet1/5
 no ip address
 shutdown
!
interface GigabitEthernet1/6
 no ip address
 shutdown
!
interface GigabitEthernet1/7
 no ip address
 shutdown
!
interface GigabitEthernet1/8
 no ip address
 shutdown
!
interface GigabitEthernet1/9
 no ip address
 shutdown
!
interface GigabitEthernet1/10
 no ip address
 shutdown
!
interface GigabitEthernet1/11
 no ip address
 shutdown
!
interface GigabitEthernet1/12
 no ip address
 shutdown
!
interface GigabitEthernet1/13
 no ip address
 shutdown
!
interface GigabitEthernet1/14
 no ip address
 shutdown
!
interface GigabitEthernet1/15
 no ip address
 shutdown
!
interface GigabitEthernet1/16
 no ip address
 shutdown
!
interface GigabitEthernet1/17
 no ip address
 shutdown
!
interface GigabitEthernet1/18
 no ip address
 shutdown
!
interface GigabitEthernet1/19
 no ip address
 shutdown
!
interface GigabitEthernet1/20
 no ip address
 shutdown
!
interface GigabitEthernet1/21
 no ip address
 shutdown
!
interface GigabitEthernet1/22
 no ip address
 shutdown
!
interface GigabitEthernet1/23
 no ip address
 shutdown
!
interface GigabitEthernet1/24
 no ip address
 shutdown
!
interface GigabitEthernet1/25
 no ip address
 shutdown
!
interface GigabitEthernet1/26
 no ip address
 shutdown
!
interface GigabitEthernet1/27
 no ip address
 shutdown
!
interface GigabitEthernet1/28
 no ip address
 shutdown
!
interface GigabitEthernet1/29
 no ip address
 shutdown
!
interface GigabitEthernet1/30
 no ip address
 shutdown
!
interface GigabitEthernet1/31
 no ip address
 shutdown
!
interface GigabitEthernet1/32
 no ip address
 shutdown
!
interface GigabitEthernet1/33
 no ip address
 shutdown
!
interface GigabitEthernet1/34
 no ip address
 shutdown
!
interface GigabitEthernet1/35
 no ip address
 shutdown
!
interface GigabitEthernet1/36
 no ip address
 shutdown
!
interface GigabitEthernet1/37
 no ip address
 shutdown
!
interface GigabitEthernet1/38
 no ip address
 shutdown
!
interface GigabitEthernet1/39
 no ip address
 shutdown
!
interface GigabitEthernet1/40
 no ip address
 shutdown
!
interface GigabitEthernet1/41
 no ip address
 shutdown
!
interface GigabitEthernet1/42
 no ip address
 shutdown
!
interface GigabitEthernet1/43
 no ip address
 shutdown
!
interface GigabitEthernet1/44
 no ip address
 shutdown
!
interface GigabitEthernet1/45
 no ip address
 shutdown
!
interface GigabitEthernet1/46
 no ip address
 shutdown
!
interface GigabitEthernet1/47
 no ip address
 shutdown
!
interface GigabitEthernet1/48
 no ip address
 shutdown
!
interface GigabitEthernet2/1
 no ip address
 shutdown
!
interface GigabitEthernet2/2
 no ip address
 shutdown
!
interface GigabitEthernet2/3
 no ip address
 shutdown
!
interface GigabitEthernet2/4
 no ip address
 shutdown
!
interface GigabitEthernet2/5
 no ip address
 shutdown
!
interface GigabitEthernet2/6
 no ip address
 shutdown
!
interface GigabitEthernet2/7
 no ip address
 shutdown
!
interface GigabitEthernet2/8
 no ip address
 shutdown
!
interface GigabitEthernet2/9
 no ip address
 shutdown
!
interface GigabitEthernet2/10
 no ip address
 shutdown
!
interface GigabitEthernet2/11
 no ip address
 shutdown
!
interface GigabitEthernet2/12
 no ip address
 shutdown
!
interface GigabitEthernet2/13
 no ip address
 shutdown
!
interface GigabitEthernet2/14
 no ip address
 shutdown
!
interface GigabitEthernet2/15
 no ip address
 shutdown
!
interface GigabitEthernet2/16
 no ip address
 shutdown
!
interface GigabitEthernet2/17
 no ip address
 shutdown
!
interface GigabitEthernet2/18
 no ip address
 shutdown
!
interface GigabitEthernet2/19
 no ip address
 shutdown
!
interface GigabitEthernet2/20
 no ip address
 shutdown
!
interface GigabitEthernet2/21
 no ip address
 shutdown
!
interface GigabitEthernet2/22
 no ip address
 shutdown
!
interface GigabitEthernet2/23
 no ip address
 shutdown
!
interface GigabitEthernet2/24
 no ip address
 shutdown
!
interface GigabitEthernet2/25
 no ip address
 shutdown
!
interface GigabitEthernet2/26
 no ip address
 shutdown
!
interface GigabitEthernet2/27
 no ip address
 shutdown
!
interface GigabitEthernet2/28
 no ip address
 shutdown
!
interface GigabitEthernet2/29
 no ip address
 shutdown
!
interface GigabitEthernet2/30
 no ip address
 shutdown
!
interface GigabitEthernet2/31
 no ip address
 shutdown
!
interface GigabitEthernet2/32
 no ip address
 shutdown
!
interface GigabitEthernet2/33
 no ip address
 shutdown
!
interface GigabitEthernet2/34
 no ip address
 shutdown
!
interface GigabitEthernet2/35
 no ip address
 shutdown
!
interface GigabitEthernet2/36
 no ip address
 shutdown
!
interface GigabitEthernet2/37
 no ip address
 shutdown
!
interface GigabitEthernet2/38
 no ip address
 shutdown
!
interface GigabitEthernet2/39
 no ip address
 shutdown
!
interface GigabitEthernet2/40
 no ip address
 shutdown
!
interface GigabitEthernet2/41
 no ip address
 shutdown
!
interface GigabitEthernet2/42
 no ip address
 shutdown
!
interface GigabitEthernet2/43
 no ip address
 shutdown
!
interface GigabitEthernet2/44
 no ip address
 shutdown
!
interface GigabitEthernet2/45
 no ip address
 shutdown
!
interface GigabitEthernet2/46
 no ip address
 shutdown
!
interface GigabitEthernet2/47
 no ip address
 shutdown
!
interface GigabitEthernet2/48
 no ip address
 shutdown
!
interface GigabitEthernet3/1
 no ip address
 shutdown
!
interface GigabitEthernet3/2
 no ip address
 shutdown
!
interface GigabitEthernet3/3
 no ip address
 shutdown
!
interface GigabitEthernet3/4
 no ip address
 shutdown
!
interface GigabitEthernet3/5
 no ip address
 shutdown
!
interface GigabitEthernet3/6
 no ip address
 shutdown
!
interface GigabitEthernet3/7
 no ip address
 shutdown
!
interface GigabitEthernet3/8
 no ip address
 shutdown
!
interface GigabitEthernet3/9
 no ip address
 shutdown
!
interface GigabitEthernet3/10
 no ip address
 shutdown
!
interface GigabitEthernet3/11
 no ip address
 shutdown
!
interface GigabitEthernet3/12
 no ip address
 shutdown
!
interface GigabitEthernet3/13
 no ip address
 shutdown
!
interface GigabitEthernet3/14
 no ip address
 shutdown
!
interface GigabitEthernet3/15
 no ip address
 shutdown
!
interface GigabitEthernet3/16
 no ip address
 shutdown
!
interface GigabitEthernet3/17
 no ip address
 shutdown
!
interface GigabitEthernet3/18
 no ip address
 shutdown
!
interface GigabitEthernet3/19
 no ip address
 shutdown
!
interface GigabitEthernet3/20
 no ip address
 shutdown
!
interface GigabitEthernet3/21
 no ip address
 shutdown
!
interface GigabitEthernet3/22
 no ip address
 shutdown
!
interface GigabitEthernet3/23
 no ip address
 shutdown
!
interface GigabitEthernet3/24
 no ip address
 shutdown
!
interface GigabitEthernet3/25
 no ip address
 shutdown
!
interface GigabitEthernet3/26
 no ip address
 shutdown
!
interface GigabitEthernet3/27
 no ip address
 shutdown
!
interface GigabitEthernet3/28
 no ip address
 shutdown
!
interface GigabitEthernet3/29
 no ip address
 shutdown
!
interface GigabitEthernet3/30
 no ip address
 shutdown
!
interface GigabitEthernet3/31
 no ip address
 shutdown
!
interface GigabitEthernet3/32
 no ip address
 shutdown
!
interface GigabitEthernet3/33
 no ip address
 shutdown
!
interface GigabitEthernet3/34
 no ip address
 shutdown
!
interface GigabitEthernet3/35
 no ip address
 shutdown
!
interface GigabitEthernet3/36
 no ip address
 shutdown
!
interface GigabitEthernet3/37
 no ip address
 shutdown
!
interface GigabitEthernet3/38
 no ip address
 shutdown
!
interface GigabitEthernet3/39
 no ip address
 shutdown
!
interface GigabitEthernet3/40
 no ip address
 shutdown
!
interface GigabitEthernet3/41
 no ip address
 shutdown
!
interface GigabitEthernet3/42
 no ip address
 shutdown
!
interface GigabitEthernet3/43
 no ip address
 shutdown
!
interface GigabitEthernet3/44
 no ip address
 shutdown
!
interface GigabitEthernet3/45
 no ip address
 shutdown
!
interface GigabitEthernet3/46
 no ip address
 shutdown
!
interface GigabitEthernet3/47
 no ip address
 shutdown
!
interface GigabitEthernet3/48
 no ip address
 shutdown
!
interface GigabitEthernet4/1
 no ip address
 shutdown
!
interface GigabitEthernet4/2
 no ip address
 shutdown
!
interface GigabitEthernet4/3
 no ip address
 shutdown
!
interface GigabitEthernet4/4
 no ip address
 shutdown
!
interface GigabitEthernet4/5
 no ip address
 shutdown
!
interface GigabitEthernet4/6
 no ip address
 shutdown
!
interface GigabitEthernet4/7
 no ip address
 shutdown
!
interface GigabitEthernet4/8
 no ip address
 shutdown
!
interface GigabitEthernet4/9
 no ip address
 shutdown
!
interface GigabitEthernet4/10
 no ip address
 shutdown
!
interface GigabitEthernet4/11
 no ip address
 shutdown
!
interface GigabitEthernet4/12
 no ip address
 shutdown
!
interface GigabitEthernet4/13
 no ip address
 shutdown
!
interface GigabitEthernet4/14
 no ip address
 shutdown
!
interface GigabitEthernet4/15
 no ip address
 shutdown
!
interface GigabitEthernet4/16
 no ip address
 shutdown
!
interface GigabitEthernet4/17
 no ip address
 shutdown
!
interface GigabitEthernet4/18
 no ip address
 shutdown
!
interface GigabitEthernet4/19
 no ip address
 shutdown
!
interface GigabitEthernet4/20
 no ip address
 shutdown
!
interface GigabitEthernet4/21
 no ip address
 shutdown
!
interface GigabitEthernet4/22
 no ip address
 shutdown
!
interface GigabitEthernet4/23
 no ip address
 shutdown
!
interface GigabitEthernet4/24
 no ip address
 shutdown
!
interface GigabitEthernet4/25
 no ip address
 shutdown
!
interface GigabitEthernet4/26
 no ip address
 shutdown
!
interface GigabitEthernet4/27
 no ip address
 shutdown
!
interface GigabitEthernet4/28
 no ip address
 shutdown
!
interface GigabitEthernet4/29
 no ip address
 shutdown
!
interface GigabitEthernet4/30
 no ip address
 shutdown
!
interface GigabitEthernet4/31
 no ip address
 shutdown
!
interface GigabitEthernet4/32
 no ip address
 shutdown
!
interface GigabitEthernet4/33
 no ip address
 shutdown
!
interface GigabitEthernet4/34
 no ip address
 shutdown
!
interface GigabitEthernet4/35
 no ip address
 shutdown
!
interface GigabitEthernet4/36
 no ip address
 shutdown
!
interface GigabitEthernet4/37
 no ip address
 shutdown
!
interface GigabitEthernet4/38
 no ip address
 shutdown
!
interface GigabitEthernet4/39
 no ip address
 shutdown
!
interface GigabitEthernet4/40
 no ip address
 shutdown
!
interface GigabitEthernet4/41
 no ip address
 shutdown
!
interface GigabitEthernet4/42
 no ip address
 shutdown
!
interface GigabitEthernet4/43
 no ip address
 shutdown
!
interface GigabitEthernet4/44
 no ip address
 shutdown
!
interface GigabitEthernet4/45
 no ip address
 shutdown
!
interface GigabitEthernet4/46
 no ip address
 shutdown
!
interface GigabitEthernet4/47
 no ip address
 shutdown
!
interface GigabitEthernet4/48
 no ip address
 shutdown
!
interface GigabitEthernet5/1
 no ip address
 shutdown
!
interface GigabitEthernet5/2
 no ip address
 shutdown
!
interface GigabitEthernet5/3
 no ip address
 shutdown
!
interface GigabitEthernet5/4
 no ip address
 shutdown
!
interface GigabitEthernet5/5
 no ip address
 shutdown
!
interface GigabitEthernet5/6
 no ip address
 shutdown
!
interface GigabitEthernet5/7
 no ip address
 shutdown
!
interface GigabitEthernet5/8
 no ip address
 shutdown
!
interface GigabitEthernet5/9
 no ip address
 shutdown
!
interface GigabitEthernet5/10
 no ip address
 shutdown
!
interface GigabitEthernet5/11
 no ip address
 shutdown
!
interface GigabitEthernet5/12
 no ip address
 shutdown
!
interface GigabitEthernet5/13
 no ip address
 shutdown
!
interface GigabitEthernet5/14
 no ip address
 shutdown
!
interface GigabitEthernet5/15
 no ip address
 shutdown
!
interface GigabitEthernet5/16
 no ip address
 shutdown
!
interface GigabitEthernet5/17
 no ip address
 shutdown
!
interface GigabitEthernet5/18
 no ip address
 shutdown
!
interface GigabitEthernet5/19
 no ip address
 shutdown
!
interface GigabitEthernet5/20
 no ip address
 shutdown
!
interface GigabitEthernet5/21
 no ip address
 shutdown
!
interface GigabitEthernet5/22
 no ip address
 shutdown
!
interface GigabitEthernet5/23
 no ip address
 shutdown
!
interface GigabitEthernet5/24
 no ip address
 shutdown
!
interface GigabitEthernet5/25
 no ip address
 shutdown
!
interface GigabitEthernet5/26
 no ip address
 shutdown
!
interface GigabitEthernet5/27
 no ip address
 shutdown
!
interface GigabitEthernet5/28
 no ip address
 shutdown
!
interface GigabitEthernet5/29
 no ip address
 shutdown
!
interface GigabitEthernet5/30
 no ip address
 shutdown
!
interface GigabitEthernet5/31
 no ip address
 shutdown
!
interface GigabitEthernet5/32
 no ip address
 shutdown
!
interface GigabitEthernet5/33
 no ip address
 shutdown
!
interface GigabitEthernet5/34
 no ip address
 shutdown
!
interface GigabitEthernet5/35
 no ip address
 shutdown
!
interface GigabitEthernet5/36
 no ip address
 shutdown
!
interface GigabitEthernet5/37
 no ip address
 shutdown
!
interface GigabitEthernet5/38
 no ip address
 shutdown
!
interface GigabitEthernet5/39
 no ip address
 shutdown
!
interface GigabitEthernet5/40
 no ip address
 shutdown
!
interface GigabitEthernet5/41
 no ip address
 shutdown
!
interface GigabitEthernet5/42
 no ip address
 shutdown
!
interface GigabitEthernet5/43
 no ip address
 shutdown
!
interface GigabitEthernet5/44
 no ip address
 shutdown
!
interface GigabitEthernet5/45
 no ip address
 shutdown
!
interface GigabitEthernet5/46
 no ip address
 shutdown
!
interface GigabitEthernet5/47
 no ip address
 shutdown
!
interface GigabitEthernet5/48
 no ip address
 shutdown
!
interface GigabitEthernet6/1
 no ip address
 shutdown
!
interface GigabitEthernet6/2
 no ip address
 shutdown
!
interface GigabitEthernet6/3
 no ip address
 shutdown
!
interface GigabitEthernet6/4
 no ip address
 shutdown
!
interface GigabitEthernet6/5
 no ip address
 shutdown
!
interface GigabitEthernet6/6
 no ip address
 shutdown
!
interface GigabitEthernet6/7
 no ip address
 shutdown
!
interface GigabitEthernet6/8
 no ip address
 shutdown
!
interface GigabitEthernet6/9
 no ip address
 shutdown
!
interface GigabitEthernet6/10
 no ip address
 shutdown
!
interface GigabitEthernet6/11
 no ip address
 shutdown
!
interface GigabitEthernet6/12
 no ip address
 shutdown
!
interface GigabitEthernet6/13
 no ip address
 shutdown
!
interface GigabitEthernet6/14
 no ip address
 shutdown
!
interface GigabitEthernet6/15
 no ip address
 shutdown
!
interface GigabitEthernet6/16
 no ip address
 shutdown
!
interface GigabitEthernet6/17
 no ip address
 shutdown
!
interface GigabitEthernet6/18
 no ip address
 shutdown
!
interface GigabitEthernet6/19
 no ip address
 shutdown
!
interface GigabitEthernet6/20
 no ip address
 shutdown
!
interface GigabitEthernet6/21
 no ip address
 shutdown
!
interface GigabitEthernet6/22
 no ip address
 shutdown
!
interface GigabitEthernet6/23
 no ip address
 shutdown
!
interface GigabitEthernet6/24
 no ip address
 shutdown
!
interface GigabitEthernet6/25
 no ip address
 shutdown
!
interface GigabitEthernet6/26
 no ip address
 shutdown
!
interface GigabitEthernet6/27
 no ip address
 shutdown
!
interface GigabitEthernet6/28
 no ip address
 shutdown
!
interface GigabitEthernet6/29
 no ip address
 shutdown
!
interface GigabitEthernet6/30
 no ip address
 shutdown
!
interface GigabitEthernet6/31
 no ip address
 shutdown
!
interface GigabitEthernet6/32
 no ip address
 shutdown
!
interface GigabitEthernet6/33
 no ip address
 shutdown
!
interface GigabitEthernet6/34
 no ip address
 shutdown
!
interface GigabitEthernet6/35
 no ip address
 shutdown
!
interface GigabitEthernet6/36
 no ip address
 shutdown
!
interface GigabitEthernet6/37
 no ip address
 shutdown
!
interface GigabitEthernet6/38
 no ip address
 shutdown
!
interface GigabitEthernet6/39
 no ip address
 shutdown
!
interface GigabitEthernet6/40
 no ip address
 shutdown
!
interface GigabitEthernet6/41
 no ip address
 shutdown
!
interface GigabitEthernet6/42
 no ip address
 shutdown
!
interface GigabitEthernet6/43
 no ip address
 shutdown
!
interface GigabitEthernet6/44
 no ip address
 shutdown
!
interface GigabitEthernet6/45
 no ip address
 shutdown
!
interface GigabitEthernet6/46
 no ip address
 shutdown
!
interface GigabitEthernet6/47
 no ip address
 shutdown
!
interface GigabitEthernet6/48
 no ip address
 shutdown
!
interface GigabitEthernet7/1
 no ip address
 shutdown
!
interface GigabitEthernet7/2
 no ip address
 shutdown
!
interface GigabitEthernet8/1
 no ip address
 shutdown
!
interface GigabitEthernet8/2
 no ip address
 shutdown
!
interface GigabitEthernet10/1
 description 8600 Uplink 1
 switchport
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 999
 switchport trunk allowed vlan 40,50,51,60-62
 switchport mode trunk
 switchport nonegotiate
 no ip address
 speed nonegotiate
 channel-protocol lacp
 channel-group 1 mode active
!
interface GigabitEthernet10/2
 no ip address
 shutdown
!
interface GigabitEthernet10/3
 no ip address
 shutdown
!
interface GigabitEthernet10/4
 no ip address
 shutdown
!
interface GigabitEthernet10/5
 no ip address
 shutdown
!
interface GigabitEthernet10/6
 no ip address
 shutdown
!
interface GigabitEthernet10/7
 no ip address
 shutdown
!
interface GigabitEthernet10/8
 no ip address
 shutdown
!
interface GigabitEthernet10/9
 no ip address
 shutdown
!
interface GigabitEthernet10/10
 no ip address
 shutdown
!
interface GigabitEthernet10/11
 no ip address
 shutdown
!
interface GigabitEthernet10/12
 no ip address
 shutdown
!
interface GigabitEthernet10/13
 no ip address
 shutdown
!
interface GigabitEthernet10/14
 no ip address
 shutdown
!
interface GigabitEthernet10/15
 no ip address
 shutdown
!
interface GigabitEthernet10/16
 no ip address
 shutdown
!
interface GigabitEthernet10/17
 no ip address
 shutdown
!
interface GigabitEthernet10/18
 no ip address
 shutdown
!
interface GigabitEthernet10/19
 no ip address
 shutdown
!
interface GigabitEthernet10/20
 no ip address
 shutdown
!
interface GigabitEthernet10/21
 no ip address
 shutdown
!
interface GigabitEthernet10/22
 no ip address
 shutdown
!
interface GigabitEthernet10/23
 no ip address
 shutdown
!
interface GigabitEthernet10/24
 no ip address
 shutdown
!
interface GigabitEthernet10/25
 no ip address
 shutdown
!
interface GigabitEthernet10/26
 no ip address
 shutdown
!
interface GigabitEthernet10/27
 no ip address
 shutdown
!
interface GigabitEthernet10/28
 no ip address
 shutdown
!
interface GigabitEthernet10/29
 no ip address
 shutdown
!
interface GigabitEthernet10/30
 no ip address
 shutdown
!
interface GigabitEthernet10/31
 no ip address
 shutdown
!
interface GigabitEthernet10/32
 no ip address
 shutdown
!
interface GigabitEthernet10/33
 no ip address
 shutdown
!
interface GigabitEthernet10/34
 no ip address
 shutdown
!
interface GigabitEthernet10/35
 no ip address
 shutdown
!
interface GigabitEthernet10/36
 no ip address
 shutdown
!
interface GigabitEthernet10/37
 no ip address
 shutdown
!
interface GigabitEthernet10/38
 no ip address
 shutdown
!
interface GigabitEthernet10/39
 no ip address
 shutdown
!
interface GigabitEthernet10/40
 no ip address
 shutdown
!
interface GigabitEthernet10/41
 no ip address
 shutdown
!
interface GigabitEthernet10/42
 no ip address
 shutdown
!
interface GigabitEthernet10/43
 no ip address
 shutdown
!
interface GigabitEthernet10/44
 no ip address
 shutdown
!
interface GigabitEthernet10/45
 no ip address
 shutdown
!
interface GigabitEthernet10/46
 no ip address
 shutdown
!
interface GigabitEthernet10/47
 no ip address
 shutdown
!
interface GigabitEthernet10/48
 no ip address
 shutdown
!
interface GigabitEthernet11/1
 description 8600 Uplink 2
 switchport
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 999
 switchport trunk allowed vlan 40,50,51,60-62,70
 switchport mode trunk
 switchport nonegotiate
 no ip address
 speed nonegotiate
 channel-protocol lacp
 channel-group 1 mode active
!
interface GigabitEthernet11/2
 no ip address
 shutdown
!
interface GigabitEthernet11/3
 no ip address
 shutdown
!
interface GigabitEthernet11/4
 no ip address
 shutdown
!
interface GigabitEthernet11/5
 no ip address
 shutdown
!
interface GigabitEthernet11/6
 no ip address
 shutdown
!
interface GigabitEthernet11/7
 no ip address
 shutdown
!
interface GigabitEthernet11/8
 no ip address
 shutdown
!
interface GigabitEthernet11/9
 no ip address
 shutdown
!
interface GigabitEthernet11/10
 no ip address
 shutdown
!
interface GigabitEthernet11/11
 no ip address
 shutdown
!
interface GigabitEthernet11/12
 no ip address
 shutdown
!
interface GigabitEthernet11/13
 no ip address
 shutdown
!
interface GigabitEthernet11/14
 no ip address
 shutdown
!
interface GigabitEthernet11/15
 no ip address
 shutdown
!
interface GigabitEthernet11/16
 no ip address
 shutdown
!
interface GigabitEthernet11/17
 no ip address
 shutdown
!
interface GigabitEthernet11/18
 no ip address
 shutdown
!
interface GigabitEthernet11/19
 no ip address
 shutdown
!
interface GigabitEthernet11/20
 no ip address
 shutdown
!
interface GigabitEthernet11/21
 no ip address
 shutdown
!
interface GigabitEthernet11/22
 no ip address
 shutdown
!
interface GigabitEthernet11/23
 no ip address
 shutdown
!
interface GigabitEthernet11/24
 no ip address
 shutdown
!
interface GigabitEthernet11/25
 no ip address
 shutdown
!
interface GigabitEthernet11/26
 no ip address
 shutdown
!
interface GigabitEthernet11/27
 no ip address
 shutdown
!
interface GigabitEthernet11/28
 no ip address
 shutdown
!
interface GigabitEthernet11/29
 no ip address
 shutdown
!
interface GigabitEthernet11/30
 no ip address
 shutdown
!
interface GigabitEthernet11/31
 no ip address
 shutdown
!
interface GigabitEthernet11/32
 no ip address
 shutdown
!
interface GigabitEthernet11/33
 no ip address
 shutdown
!
interface GigabitEthernet11/34
 no ip address
 shutdown
!
interface GigabitEthernet11/35
 no ip address
 shutdown
!
interface GigabitEthernet11/36
 no ip address
 shutdown
!
interface GigabitEthernet11/37
 no ip address
 shutdown
!
interface GigabitEthernet11/38
 no ip address
 shutdown
!
interface GigabitEthernet11/39
 no ip address
 shutdown
!
interface GigabitEthernet11/40
 no ip address
 shutdown
!
interface GigabitEthernet11/41
 no ip address
 shutdown
!
interface GigabitEthernet11/42
 no ip address
 shutdown
!
interface GigabitEthernet11/43
 no ip address
 shutdown
!
interface GigabitEthernet11/44
 no ip address
 shutdown
!
interface GigabitEthernet11/45
 no ip address
 shutdown
!
interface GigabitEthernet11/46
 no ip address
 shutdown
!
interface GigabitEthernet11/47
 no ip address
 shutdown
!
interface GigabitEthernet11/48
 no ip address
 shutdown
!
interface GigabitEthernet12/0/1
 switchport
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 1,40,41,1002-1005
 switchport mode trunk
 mtu 9216
 no ip address
 flowcontrol receive on
 flowcontrol send off
 spanning-tree portfast trunk
!
interface GigabitEthernet12/0/2
 switchport
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 1,1002-1005
 switchport mode trunk
 mtu 9216
 no ip address
 flowcontrol receive on
 flowcontrol send off
 spanning-tree portfast trunk
!
interface Vlan1
 no ip address
!
interface Vlan40
 description C-Net Public VLAN
 no ip address
!
interface Vlan41
 description SPA Internal C-Net Public
 ip vrf forwarding CNET_VRF_1
 ip address 192.168.4.1 255.255.255.0
 crypto engine subslot 12/0
!
interface Vlan50
 description C-NET VRF Private
 ip vrf forwarding CNET_VRF_1
 ip address 192.168.3.4 255.255.255.0
 standby 20 ip 192.168.3.5
 standby 20 preempt
 standby 20 authentication CNET_PRV
 standby 20 name CNET_PRV
 standby 20 track GigabitEthernet1/1
 standby 20 track Vlan41
 standby 20 track Vlan40
!
interface Vlan60
 description Router network
 no ip address
!
interface Vlan61
 description FWSM failover
 no ip address
!
interface Vlan62
 description FWSM state
 no ip address
!
interface Vlan999
 no ip address
 shutdown
!
ip classless
ip route 0.0.0.0 0.0.0.0 Vlan40 172.25.254.222
ip route vrf CNET_VRF_1 0.0.0.0 0.0.0.0 172.25.254.222
ip route vrf CNET_VRF_1 172.24.0.0 255.255.254.0 Vlan41
ip route vrf CNET_VRF_1 172.25.0.0 255.255.0.0 192.168.3.1
!
no ip http server
!
ip access-list extended ACL_S_H_VPN
 remark S -> H VPN ACL
 permit ip 172.25.246.0 0.0.0.255 172.24.0.0 0.0.1.255
 permit ip 172.25.252.128 0.0.0.127 172.24.0.0 0.0.1.255
 deny   ip any any
!
!
snmp-server community <removed> RO
snmp-server community <removed> RW
!
radius-server source-ports 1645-1646
!
control-plane
!
!
!
dial-peer cor custom
!
!
!
!
line con 0
line vty 0 4
 password <removed>
!
!
scheduler runtime netinput 300
no cns aaa enable
end