!
boot-start-marker
boot system flash:c2800nm-advipservicesk9-mz.124-11.XW6.bin
boot-end-marker
!
no logging buffered
enable secret 5 $1$ere2$ssLQjEqZWQmOI2atxIa8F.
!
no aaa new-model
clock timezone GMT 0
clock summer-time GMT recurring
!
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.110.1 192.168.110.10
ip dhcp excluded-address 192.168.0.1 192.168.0.60
ip dhcp excluded-address 192.168.110.250 192.168.110.254
!
ip dhcp pool phone
   network 192.168.110.0 255.255.255.0
   default-router 192.168.110.254 
   option 150 ip 192.168.110.254 
!
ip dhcp pool data
   network 192.168.0.0 255.255.255.0
   default-router 192.168.0.254 
   dns-server 
!
!
ip name-server 87.194.0.67
ip name-server 87.194.0.66
ip name-server 205.152.0.20
ip name-server 4.2.2.2
ip inspect name SDM_LOW cuseeme
ip inspect name SDM_LOW dns
ip inspect name SDM_LOW ftp
ip inspect name SDM_LOW h323
ip inspect name SDM_LOW https
ip inspect name SDM_LOW icmp
ip inspect name SDM_LOW imap
ip inspect name SDM_LOW pop3
ip inspect name SDM_LOW netshow
ip inspect name SDM_LOW rcmd
ip inspect name SDM_LOW realaudio
ip inspect name SDM_LOW rtsp
ip inspect name SDM_LOW esmtp
ip inspect name SDM_LOW sqlnet
ip inspect name SDM_LOW streamworks
ip inspect name SDM_LOW tftp
ip inspect name SDM_LOW tcp
ip inspect name SDM_LOW udp
ip inspect name SDM_LOW vdolive
!
multilink bundle-name authenticated
!
!
!
voice rtp send-recv
!
voice service voip 
 allow-connections h323 to h323
 allow-connections h323 to sip
 allow-connections sip to h323
 allow-connections sip to sip
 supplementary-service h450.12
 no supplementary-service sip moved-temporarily
 no supplementary-service sip refer
 h323
 sip
  registrar server expires max 3600 min 3600
!
!
voice class codec 1
 codec preference 1 g711ulaw
!
!
!
!
!
!
!
!
!
!
!
!
voice translation-rule 1
 rule 1 /^6../ /12341833690/
 rule 2 /12341833698/ /698/
!
voice translation-rule 2
 rule 1 /^90/ /0/
 rule 2 /698/ /12341833698/
!
!
voice translation-profile 1
 translate calling 1
!
voice translation-profile CUE_Voicemail
 translate calling 1
!
voice translation-profile OutgoingSIP
 translate calling 1
 translate called 2
 translate redirect-target 2
 translate redirect-called 2
!
voice translation-profile PSTN_CallForwarding
 translate redirect-target 2
 translate redirect-called 2
!
!
voice-card 0
 no dspfarm
 dsp services dspfarm
!
!
!
! 
!
!
!
username bbbbb privilege 15 secret 5 $1$kEl4$loGxPvG8PVsRmbsmnrQxv/
username bbbbb privilege 15 secret 5 $1$qxxB$me5JxREN0PxCdTqedhQcH/
archive
 log config
  hidekeys
!
!
!
!
!
!
interface GigabitEthernet0/0
 description $FW_OUTSIDE$
 ip address dhcp
 ip access-group 101 in
 duplex auto
 speed auto
!
interface GigabitEthernet0/1
 description $FW_INSIDE$
 no ip address
 duplex full
 speed 100
!
interface GigabitEthernet0/1.10
 description $FW_INSIDE$
 encapsulation dot1Q 10
 ip address 192.168.0.254 255.255.255.0
 ip access-group 100 in
 ip access-group sdm_vlan10_out out
 ip nat inside
 ip virtual-reassembly
!
interface GigabitEthernet0/1.110
 description $FW_INSIDE$
 encapsulation dot1Q 110
 ip address 192.168.110.254 255.255.255.0
 ip nat inside
 ip virtual-reassembly
!
interface ATM0/0/0
 no ip address
 no ip redirects
 no ip unreachables
 no ip mroute-cache
 no atm ilmi-keepalive
 dsl operating-mode auto 
 pvc 0/38 
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
!
interface ATM0/2/0
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 no ip mroute-cache
 no atm ilmi-keepalive
 dsl operating-mode auto 
!
interface ATM0/2/0.1 point-to-point
 description $FW_OUTSIDE$ BTHere
 mtu 1500
 ip address x.x.x.x 255.255.248.0
 ip access-group sdm_atm0/2/0.1_out out
 ip verify unicast reverse-path
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat outside
 ip inspect SDM_LOW out
 ip virtual-reassembly
 ip tcp adjust-mss 1460
 no snmp trap link-status
 atm route-bridged ip
 pvc BeThere 0/101 
  oam-pvc manage
  encapsulation aal5snap
 !
!
interface Service-Engine1/0
 ip unnumbered GigabitEthernet0/1.110
 shutdown
 service-module ip address 192.168.110.253 255.255.255.0
 service-module ip default-gateway 192.168.110.254
!
interface Dialer0
 description $FW_OUTSIDE$
 ip address negotiated
 ip access-group 150 in
 ip mtu 1400
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp authentication chap callin
 ppp chap hostname xxxxxx
 ppp chap password 0 xxxxxxx
 ppp pap sent-username xxxxxx password 0 xxxxxxx
 ppp ipcp mask request
 ppp ipcp address accept
!
interface Dialer2
 ip address negotiated
 ip virtual-reassembly
 encapsulation ppp
 dialer pool 2
 dialer-group 2
 no cdp enable
 ppp ipcp mask request
 ppp ipcp route default
 ppp ipcp address accept
!
ip route 0.0.0.0 0.0.0.0 x.x.x.x
ip route x.x.x.x 255.255.255.0 Dialer0
ip route 192.168.110.253 255.255.255.255 Service-Engine1/0
!
!
ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
ip http path flash:
ip nat inside source list data_nat_out interface ATM0/2/0.1 overload
ip nat inside source list voice_nat_out interface Dialer0 overload
ip nat inside source static tcp 192.168.0.10 3389 interface ATM0/2/0.1 3389
!
ip access-list extended data_nat_out
 permit ip 192.168.0.0 0.0.0.255 any
ip access-list extended sdm_atm0/2/0.1_out
 remark SDM_ACL Category=1
 remark Any IP Outbound
 permit ip any any
ip access-list extended sdm_dialer0_in
 remark SDM_ACL Category=1
 deny   ip 192.168.0.0 0.0.0.255 any
 permit icmp any any echo-reply
 permit icmp any any time-exceeded
 permit icmp any any unreachable
 deny   ip 10.0.0.0 0.255.255.255 any
 deny   ip 172.16.0.0 0.15.255.255 any
 deny   ip 192.168.0.0 0.0.255.255 any
 deny   ip 127.0.0.0 0.255.255.255 any
 deny   ip host 255.255.255.255 any
 deny   ip host 0.0.0.0 any
 permit udp host x.x.x.x eq domain any
 permit udp host x.x.x.x eq domain any
 permit udp host x.x.x.x eq domain any
 permit udp host x.x.x.x eq domain any
 permit ip any any
ip access-list extended sdm_dialer0_out
 remark SDM_ACL Category=1
 permit ip any any
ip access-list extended sdm_vlan10_out
 remark SDM_ACL Category=1
 permit ip any any
ip access-list extended sdm_vlan110_out
 remark SDM_ACL Category=1
 permit ip any any
ip access-list extended sip_voice_ACL
 permit ip any x.x.x.x0 0.0.0.255
ip access-list extended voice_nat_out
 permit ip 192.168.110.0 0.0.0.255 any
!
access-list 1 remark SDM_ACL Category=16
access-list 1 permit 192.168.0.0 0.0.0.255
access-list 1 permit 192.168.110.0 0.0.0.255
access-list 100 remark auto generated by SDM firewall configuration
access-list 100 remark SDM_ACL Category=1
access-list 100 permit ip any any
access-list 101 remark auto generated by SDM firewall configuration
access-list 101 remark SDM_ACL Category=1
access-list 101 permit ip any any
access-list 110 remark Map internal VLAN110 to Dialer0
access-list 110 remark SDM_ACL Category=2
access-list 110 remark NAT ALL VOICE rule 192.168.110.*
access-list 110 permit ip 192.168.110.0 0.0.0.255 any
access-list 120 remark NAT VLAN to OUTSIDE ATM
access-list 120 remark SDM_ACL Category=2
access-list 120 remark NAT ALL DATA 192.168.0.*
access-list 120 permit ip 192.168.0.0 0.0.0.255 any
access-list 150 permit ip x.x.x.x 0.0.0.255 host x.x.x.x
access-list 150 permit ip x.x.x.x0 0.0.0.255 host x.x.x.x
access-list 150 permit ip x.x.x.x0 0.0.0.255 host x.x.x.x
access-list 150 permit ip x.x.x.x 0.0.0.255 host x.x.x.x
access-list 150 permit ip x.x.x.x 0.0.0.255 host x.x.x.x
access-list 150 permit ip x.x.x.x 0.0.0.255 host x.x.x.x
access-list 150 permit ip any host x.x.x.x
access-list 150 permit ip any host x.x.x.x
access-list 150 deny   tcp any any eq 5838
access-list 150 deny   udp any any eq 10000
access-list 150 deny   udp any any eq 5004
access-list 150 deny   icmp any any echo
access-list 150 deny   icmp any any echo-reply
access-list 150 deny   tcp any any eq 1720
access-list 150 deny   udp any any eq 1720
access-list 150 deny   tcp any any eq 5060
access-list 150 deny   udp any any eq 5060
access-list 150 permit ip any any
!
!
!
route-map fixed-datanat permit 10
 match ip address 120
 match interface ATM0/2/0.1 Dialer0
!
route-map sip_voice permit 10
 match ip address sip_voice_ACL
 set ip next-hop x.x.x.x
 set interface Dialer0
!
route-map fixed-voicenat permit 11
 match ip address 110
 match interface Dialer0
!
!
!
tftp-server flash:P0030702T023.loads
tftp-server flash:P0030702T023.sb2
tftp-server flash:P0030702T023.sbn
tftp-server flash:P0030702T023.bin
tftp-server flash:P0030702T023
!
control-plane
!
!
!
!
!
sccp local GigabitEthernet0/1.110
sccp ccm 192.168.110.254 identifier 1 version 4.1 
sccp
!
sccp ccm group 1
 bind interface GigabitEthernet0/1.110
 associate ccm 1 priority 1
 associate profile 1 register tranx1
!
dspfarm profile 1 transcode  
 codec g711ulaw
 codec g711alaw
 codec ilbc
 codec g723r63
 codec g723r53
 codec gsmamr-nb
 codec g729ar8
 codec g729abr8
 codec g729r8
 maximum sessions 6
 associate application SCCP
!
dial-peer cor custom
 name internal
 name local
 name domestic
 name international
 name 900
 name 976
 name 698
!
!
dial-peer cor list call-internal
 member internal
 member 698
!
dial-peer cor list call-local
 member local
 member 698
!
dial-peer cor list call-domestic
 member domestic
 member 698
!
dial-peer cor list call-international
 member international
!
dial-peer cor list call-900
 member 900
!
dial-peer cor list call-976
 member 976
!
dial-peer cor list user-internal
 member internal
 member 698
!
dial-peer cor list user-local
 member internal
 member local
 member 698
!
dial-peer cor list user-domestic
 member internal
 member local
 member domestic
 member 698
!
dial-peer cor list user-international
 member internal
 member local
 member domestic
 member international
!
dial-peer cor list user900-internal
 member internal
 member 900
 member 976
!
dial-peer cor list user900-local
 member internal
 member local
 member 900
 member 976
!
dial-peer cor list user900-domestic
 member internal
 member local
 member domestic
 member 900
 member 976
!
dial-peer cor list user900-international
 member internal
 member local
 member domestic
 member international
 member 900
 member 976
 member 698
!
dial-peer cor list call-698
 member 698
!
!
dial-peer voice 1000 voip
 permission term
 description ** Incoming call from SIP trunk **
 translation-profile incoming CUE_Voicemail
 voice-class codec 1
 voice-class sip dtmf-relay force rtp-nte
 session protocol sipv2
 session target sip-server
 dtmf-relay rtp-nte
 no vad
!
dial-peer voice 2510 voip
 permission term
 description ** SIP Trunk Abie **
 translation-profile outgoing 1
 destination-pattern 160
 voice-class codec 1
 voice-class sip dtmf-relay force rtp-nte
 session protocol sipv2
 session target dns:.net
 dtmf-relay rtp-nte
 no vad
!
dial-peer voice 25999 voip
 permission term
 description ** Emergency Dialing 999 **
 translation-profile outgoing 1
 destination-pattern 160
 voice-class codec 1
 voice-class sip dtmf-relay force rtp-nte
 session protocol sipv2
 session target dns:.net
 dtmf-relay rtp-nte
 no vad
!
dial-peer voice 2511 voip
 permission term
 description ** Digit 11 Digit **
 translation-profile outgoing OutgoingSIP
 destination-pattern 90[1-9].........
 voice-class codec 1
 voice-class sip dtmf-relay force rtp-nte
 session protocol sipv2
 session target dns:.net
 dtmf-relay rtp-nte
 no vad
!
dial-peer voice 2512 voip
 permission term
 description ** Digit International Dialing  **
 translation-profile outgoing OutgoingSIP
 destination-pattern 900T
 voice-class codec 1
 voice-class sip dtmf-relay force rtp-nte
 session protocol sipv2
 session target dns:.net
 dtmf-relay rtp-nte
 no vad
!
dial-peer voice 2513 voip
 permission term
 description ** SIP Trunk Test **
 translation-profile outgoing 1
 destination-pattern 013355999999999901
 voice-class codec 1
 voice-class sip dtmf-relay force rtp-nte
 session protocol sipv2
 session target dns:.net
 dtmf-relay rtp-nte
 no vad
!
dial-peer voice 1001 voip
 description ** Incoming call from SIP trunk **
 translation-profile incoming CUE_Voicemail
 voice-class codec 1
 voice-class sip dtmf-relay force rtp-nte
 session protocol sipv2
 session target sip-server
 incoming called-number 1234183369.
 dtmf-relay rtp-nte
 no vad
!
dial-peer voice 3 voip
 description **CUE Voicemail**
 translation-profile outgoing PSTN_CallForwarding
 destination-pattern 698
 b2bua
 session protocol sipv2
 session target ipv4:192.168.110.253
 dtmf-relay sip-notify
 codec g711ulaw
 no vad
!
!
sip-ua 
!
!
!
telephony-service
 sdspfarm units 1
 sdspfarm transcode sessions 6
 sdspfarm tag 1 tranx1
 no auto-reg-ephone
 load 7960-7940 P0030702T023
 max-ephones 48
 max-dn 96
 ip source-address 192.168.110.254 port 2000
 caller-id block code *916
 calling-number initiator
 service phone videoCapability 1
 system message Digit
 url services http://phone-xml.berbee.com/menu.xml
 network-locale GB
 time-zone 21
 date-format dd-mm-yy
 voicemail 698
 max-conferences 8 gain -6
 call-forward pattern .T
 moh music-on-hold.au
 web admin system name admin secret 5 $1$has8$dk0bbY601kp7VaWALuaYG/
 dn-webedit 
 time-webedit 
 transfer-system full-consult dss
 transfer-pattern .T
 secondary-dialtone 9
 create cnf-files version-stamp 7960 Feb 10 2009 20:27:37
!
!
ephone-dn  1
 number 101
 name IP-Paging1
 paging ip 239.1.1.1 port 2000
!
!
ephone-dn  2
 number 102
 name IP-Paging2
 paging ip 239.1.1.2 port 2000
!
!

!
ephone-dn  11
!
!
ephone-dn  12
 no huntstop
!
!
ephone-dn  13
 number 8000...
 mwi on
!
!
ephone-dn  14
 number 8001...
 mwi off
!
!
ephone-dn  17
 number 701
 park-slot
!
!
ephone-dn  18
 number 702
 park-slot
!
!
ephone-dn  19
 number 703
 park-slot
!
!
ephone-dn  20
 number 704
 park-slot
!
!
ephone-dn  21  dual-line
 number 690 secondary 12341833690
 pickup-group 1
 label 690
 description MAINLINE
 name MAINLINE X690
 call-forward max-length 12
 call-forward busy 698
 call-forward noan 698 timeout 15
 corlist incoming user900-international
!
!
ephone  1
 device-security-mode none
 video
 mac-address 001E.7AC3.DED4
 username "gd" password 691
 type 7940
 button  1:3 2:21
!
!
!

!
ephone  14
 device-security-mode none
 mac-address 000C.F637.E21A
 type CIPC
!
!
!
ephone  15
 device-security-mode none
 mac-address 0019.D20B.60CA
 type CIPC
!
!
alias exec cue service-module service-engine 1/0 session
!
line con 0
line aux 0
line 66
 no activation-character
 no exec
 transport preferred none
 transport input all
 transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
line vty 0 4
 privilege level 15
 password cisco
 login local
line vty 5 15
 password cisco
 login local
!
scheduler allocate 20000 1000
ntp master
ntp server 192.168.110.254

!
webvpn cef
!
end

uk#