Advertisement
Guest User

3448 Running Config

a guest
Mar 11th, 2013
106
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.93 KB | None | 0 0
  1. !
  2. ! ADTRAN, Inc. OS version R10.5.1.E
  3. ! Boot ROM version 13.03.00.SB
  4. ! Platform: NetVanta 3448, part number 1200821E1
  5. ! Serial number LBADTN1014AQ443
  6. !
  7. !
  8. hostname "Router"
  9. enable password admin
  10. !
  11. clock no-auto-correct-DST
  12. !
  13. ip subnet-zero
  14. ip classless
  15. ip default-gateway x.x.x.x
  16. ip routing
  17. ipv6 unicast-routing
  18. !
  19. !
  20. name-server x.x.x.x x.x.x.x
  21. !
  22. !
  23. no auto-config
  24. !
  25. event-history on
  26. no logging forwarding
  27. no logging email
  28. !
  29. no service password-encryption
  30. !
  31. username "admin" password "admin"
  32. !
  33. !
  34. ip firewall
  35. no ip firewall alg msn
  36. no ip firewall alg mszone
  37. no ip firewall alg h323
  38. !
  39. !
  40. !
  41. !
  42. !
  43. !
  44. !
  45. !
  46. !
  47. !
  48. !
  49. no dot11ap access-point-control
  50. !
  51. !
  52. !
  53. !
  54. !
  55. !
  56. !
  57. !
  58. !
  59. !
  60. !
  61. !
  62. ip crypto
  63. !
  64. crypto ike client configuration pool VPN
  65. ip-range 172.16.1.1 172.16.1.100
  66. dns-server 172.16.88.1
  67. netbios-name-server 172.16.88.1
  68. !
  69. crypto ike policy 100
  70. no initiate
  71. respond anymode
  72. local-id address x.x.x.x
  73. peer any
  74. client configuration pool VPN
  75. attribute 3
  76. encryption 3des
  77. hash md5
  78. authentication pre-share
  79. attribute 4
  80. encryption 3des
  81. authentication pre-share
  82. group 2
  83. !
  84. crypto ike remote-id any preshared-key admin ike-policy 100 crypto map VPN 10 no-xauth
  85. !
  86. crypto ipsec transform-set esp-3des-esp-md5-hmac esp-3des esp-md5-hmac
  87. mode tunnel
  88. !
  89. crypto map VPN 10 ipsec-ike
  90. description VPN
  91. match address VPN-10-vpn-selectors
  92. set transform-set esp-3des-esp-md5-hmac
  93. ike-policy 100
  94. mobile
  95. !
  96. !
  97. !
  98. !
  99. vlan 1
  100. name "Default"
  101. !
  102. !
  103. !
  104. no ethernet cfm
  105. !
  106. interface loop 1
  107. no ip address
  108. shutdown
  109. !
  110. interface eth 0/1
  111. ip address x.x.x.x 255.255.254.0
  112. ip access-policy Public
  113. crypto map VPN
  114. no rtp quality-monitoring
  115. no shutdown
  116. !
  117. !
  118. interface eth 0/2
  119. ip address 172.16.88.1 255.255.255.0
  120. no shutdown
  121. !
  122. !
  123. !
  124. interface switchport 0/1
  125. no shutdown
  126. !
  127. interface switchport 0/2
  128. no shutdown
  129. !
  130. interface switchport 0/3
  131. no shutdown
  132. !
  133. interface switchport 0/4
  134. no shutdown
  135. !
  136. interface switchport 0/5
  137. no shutdown
  138. !
  139. interface switchport 0/6
  140. no shutdown
  141. !
  142. interface switchport 0/7
  143. no shutdown
  144. !
  145. interface switchport 0/8
  146. no shutdown
  147. !
  148. !
  149. !
  150. interface vlan 1
  151. ip address 10.0.0.1 255.255.255.0
  152. ip access-policy Private
  153. no shutdown
  154. !
  155. !
  156. !
  157. !
  158. !
  159. !
  160. !
  161. ip access-list standard wizard-ics
  162. remark Internet Connection Sharing
  163. permit any
  164. !
  165. !
  166. ip access-list extended self
  167. remark Traffic to NetVanta
  168. permit ip any any log
  169. !
  170. ip access-list extended VPN-10-vpn-selectors
  171. permit ip 10.0.0.0 0.0.0.255 any
  172. permit ip any 10.0.0.0 0.0.0.255 log
  173. permit ip 172.16.88.0 0.0.0.255 any log
  174. permit ip any 172.16.88.0 0.0.0.255 log
  175. !
  176. ip access-list extended wizard-remote-access
  177. remark do not hand edit this ACL
  178. permit tcp any any eq www log
  179. permit tcp any any eq telnet log
  180. permit tcp any any eq ssh log
  181. permit tcp any any eq ftp log
  182. permit icmp any any echo log
  183. permit tcp any any eq https log
  184. !
  185. !
  186. !
  187. !
  188. ip policy-class Private
  189. allow list VPN-10-vpn-selectors stateless
  190. allow list self self
  191. nat source list wizard-ics interface eth 0/1 overload
  192. !
  193. ip policy-class Public
  194. allow reverse list VPN-10-vpn-selectors stateless
  195. allow list wizard-remote-access self
  196. !
  197. !
  198. !
  199. ip route 0.0.0.0 0.0.0.0 x.x.x.x
  200. !
  201. no tftp server
  202. no tftp server overwrite
  203. http server
  204. http session-timeout 28800
  205. no http secure-server
  206. no snmp agent
  207. no ip ftp server
  208. ip ftp server default-filesystem flash
  209. no ip scp server
  210. no ip sntp server
  211. !
  212. !
  213. !
  214. !
  215. !
  216. !
  217. !
  218. !
  219. !
  220. ip sip udp 5060
  221. ip sip tcp 5060
  222. !
  223. !
  224. !
  225. !
  226. !
  227. !
  228. !
  229. !
  230. !
  231. !
  232. !
  233. !
  234. !
  235. !
  236. !
  237. !
  238. !
  239. !
  240. !
  241. !
  242. !
  243. line con 0
  244. login
  245. password admin
  246. !
  247. line telnet 0 4
  248. login
  249. password admin
  250. no shutdown
  251. line ssh 0 4
  252. login local-userlist
  253. no shutdown
  254. !
  255. !
  256. ntp server x.x.x.x source ethernet 0/1
  257. ntp server x.x.x.x source ethernet 0/1 prefer
  258. !
  259. !
  260. !
  261. !
  262. !
  263. end
  264. Router#
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement