-
Notifications
You must be signed in to change notification settings - Fork 3
/
config_file_router_2
222 lines (222 loc) · 5.37 KB
/
config_file_router_2
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
version 17.9
service timestamps debug datetime msec localtime
service timestamps log datetime msec localtime
service call-home
service unsupported-transceiver
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname ROUTER_2
!
boot-start-marker
boot system flash c8000be-universalk9.17.09.04a.SPA.bin
boot-end-marker
!
no aaa new-model
clock timezone PST -8 0
clock summer-time PDT recurring
!
ip name-server 1.1.1.1 9.9.9.9
ip domain lookup source-interface TenGigabitEthernet0/0/5
ip domain name event.tech
!
login block-for 60 attempts 3 within 10
login delay 3
login on-success log
!
subscriber templating
!
vtp version 1
!
multilink bundle-name authenticated
!
crypto pki trustpoint SLA-TrustPoint
enrollment terminal
revocation-check crl
!
crypto pki certificate chain SLA-TrustPoint
!
crypto pki certificate pool
!
license feature hseck9
license udi pid C8300-1N1S-4T2X sn FLM2722116J
license boot level network-advantage addon dna-advantage
license smart url https://smartreceiver.cisco.com/licservice/license
license smart url smart https://smartreceiver.cisco.com/licservice/license
!
archive
path bootflash:config
write-memory
memory free low-watermark processor 69075
!
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
username siteadmin privilege 15 secret 9 $9$8BxcXuyWur86w.$cNQlzKnWV8hxAc0yAITmD.5Zf4ruzOSMpDbKok/2ZbM
!
redundancy
mode none
!
track 1 ip sla 1 reachability
delay down 3 up 30
!
track 2 ip sla 2 reachability
delay down 3 up 30
!
track 3 ip sla 3 reachability
delay down 3 up 30
!
track 10 list boolean or
object 1
object 2
object 3
!
interface Loopback1
ip address 169.254.1.2 255.255.255.255
!
interface GigabitEthernet0/0/0
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/1
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/2
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/3
no ip address
shutdown
negotiation auto
!
interface TenGigabitEthernet0/0/4
description ISP_2
ip address 100.64.1.6 255.255.255.252
ip nat outside
load-interval 30
negotiation auto
no cdp enable
!
interface TenGigabitEthernet0/0/5
description CORE_SWITCH
ip address 192.168.254.5 255.255.255.252
ip nat inside
ip ospf network point-to-point
negotiation auto
!
interface TenGigabitEthernet0/1/0
description ROUTER_1
ip address 192.168.254.14 255.255.255.252
ip nat inside
ip ospf network point-to-point
negotiation auto
!
router ospf 1
router-id 169.254.1.2
passive-interface default
no passive-interface TenGigabitEthernet0/0/5
no passive-interface TenGigabitEthernet0/1/0
network 192.168.254.5 0.0.0.0 area 0
network 192.168.254.14 0.0.0.0 area 0
default-information originate metric 100
!
no ip http server
ip http authentication local
no ip http secure-server
ip http client source-interface TenGigabitEthernet0/0/5
ip forward-protocol nd
ip tftp source-interface TenGigabitEthernet0/0/5
!
ip nat pool NAT_POOL 4.53.120.188 4.53.120.189 prefix-length 30
ip nat inside source list NAT_ACL pool NAT_POOL overload
!
ip route 0.0.0.0 0.0.0.0 100.64.1.5 track 10
ip route 1.1.1.1 255.255.255.255 100.64.1.5
ip route 4.2.2.2 255.255.255.255 100.64.1.5
ip route 9.9.9.9 255.255.255.255 100.64.1.5
!
ip ssh time-out 30
ip ssh authentication-retries 2
ip ssh version 2
ip ssh client algorithm mac hmac-sha2-256 hmac-sha2-256-etm@openssh.com hmac-sha2-512 hmac-sha2-512-etm@openssh.com
ip ssh client algorithm encryption aes128-cbc aes128-ctr aes128-gcm aes192-cbc aes192-ctr aes256-cbc aes256-ctr aes256-gcm
ip ssh client algorithm kex diffie-hellman-group14-sha1 ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521
!
ip access-list standard SSH
10 permit 192.168.255.0 0.0.0.255
!
ip access-list extended NAT_ACL
10 permit ip 10.10.0.0 0.0.15.255 any
20 permit ip 10.20.0.0 0.0.15.255 any
30 permit ip 192.168.255.0 0.0.0.255 any
40 permit ip 192.168.254.0 0.0.0.255 any
!
ip sla 1
icmp-echo 1.1.1.1 source-ip 192.168.254.5
frequency 5
ip sla schedule 1 life forever start-time now
ip sla 2
icmp-echo 4.2.2.2 source-ip 192.168.254.5
frequency 5
ip sla schedule 2 life forever start-time now
ip sla 3
icmp-echo 9.9.9.9 source-ip 192.168.254.5
frequency 5
ip sla schedule 3 life forever start-time now
!
control-plane
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
mgcp profile default
!
line con 0
session-timeout 20
exec-timeout 20 0
logging synchronous
login local
transport preferred none
transport output ssh
stopbits 1
line aux 0
stopbits 1
line vty 0 4
session-timeout 20
access-class SSH in
exec-timeout 20 0
logging synchronous
login local
transport preferred ssh
transport input ssh
transport output ssh
line vty 5 15
session-timeout 20
access-class SSH in
exec-timeout 20 0
logging synchronous
login local
transport preferred ssh
transport input ssh
transport output ssh
!
call-home
! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
contact-email-addr sch-smart-licensing@cisco.com
source-interface TenGigabitEthernet0/0/5
profile "CiscoTAC-1"
active
anonymous-reporting-only
destination transport-method http
!
ntp server ip time.cloudflare.com source TenGigabitEthernet0/0/5
!
end