Cisco 861 Configuration

Current configuration : 5605 bytes
!
! Last configuration change at 08:27:29 EST Mon Jan 2 2006 by admin
! NVRAM config last updated at 08:27:30 EST Mon Jan 2 2006 by admin
!
version 15.0
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname IPTVrtr
!
boot-start-marker
boot-end-marker
!
logging buffered 51200
logging console critical
enable secret
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication login userauthen local
aaa authentication ppp default local
aaa authorization exec default local
aaa authorization network default local
aaa authorization network groupauthor local
!
!
!
!
!
aaa session-id common
memory-size iomem 10
clock timezone EST -4
clock summer-time EST date Mar 11 2007 3:00 Nov 4 2007 3:00
!
crypto pki trustpoint TP-self-signed-2228585978
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2228585978
 revocation-check none
 rsakeypair TP-self-signed-2228585978
!
!
crypto pki certificate chain TP-self-signed-2228585978
 certificate self-signed 01
no ip source-route
!
!
!
ip dhcp pool dpool1
   import all
   network 192.168.20.0 255.255.255.0
   default-router 192.168.1.1
   dns-server 8.8.8.8 8.8.4.4
!
!
ip cef
no ip bootp server
ip domain name ctv.com
ip name-server 8.8.8.8
ip name-server 8.8.4.4
!
!
vpdn enable
!
vpdn-group 1
! Default PPTP VPDN group
 accept-dialin
  protocol pptp
  virtual-template 1
 l2tp tunnel timeout no-session 15
!
license udi
!
!
username
username
username
!
!
ip tcp synwait-time 10
ip ssh version 2
!
!
crypto isakmp policy 3
 encr 3des
 authentication pre-share
 group 2
!
crypto isakmp client configuration group 3000client
 key 1etme1n
 dns 8.8.8.8
 wins 8.8.4.4
 domain ctv.com
 pool ippool
!
!
crypto ipsec transform-set myset esp-3des esp-sha-hmac
!
crypto dynamic-map dynmap 10
 set transform-set myset
!
!
crypto map clientmap client authentication list userauthen
crypto map clientmap isakmp authorization list groupauthor
crypto map clientmap client configuration address respond
crypto map clientmap 10 ipsec-isakmp dynamic dynmap
!
!
!
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
 ip address .13 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip flow ingress
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 ntp disable
 no keepalive
 crypto map clientmap
!
interface Virtual-Template1
 ip unnumbered FastEthernet4
 peer default ip address pool ippool
 no keepalive
 ppp encrypt mppe auto
 ppp authentication ms-chap ms-chap-v2
!
interface Vlan1
 ip address 192.168.1.1 255.255.0.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip flow ingress
 ip nat inside
 ip virtual-reassembly
!
ip local pool ippool 192.168.20.2 192.168.20.254
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
!
ip nat inside source list 1 interface FastEthernet4 overload
ip nat inside source static 192.168.20.2 .2
ip nat inside source static 192.168.20.3 .3
ip nat inside source static 192.168.20.4 .4
ip nat inside source static 192.168.20.5 .5
ip nat inside source static 192.168.3.151 .6
ip nat inside source static 192.168.3.150 .7
ip route 0.0.0.0 0.0.0.0 .14
ip route 192.168.0.0 255.255.0.0 192.168.1.18
!
ip access-list standard safelist
 permit 74.84.110.86
 permit 192.168.1.0 0.0.0.255
 permit .0 0.0.0.15
!
logging trap debugging
access-list 1 permit 192.168.1.0 0.0.0.255
no cdp run

!
control-plane
!
!
line con 0
 no modem enable
line aux 0
line vty 0 4
 access-class safelist in
 logging synchronous
!
scheduler max-task-time 5000
scheduler allocate 4000 1000
scheduler interval 500
end