HQ

Current configuration : 9006 bytes
!
! Last configuration change at 09:15:35 ASD Mon Jul 14 2014
!
upgrade fpd auto
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
!
aaa new-model
!
!
aaa authentication login c2s-authentication local
aaa authentication login R-AUTHE group radius
aaa authentication login VTY group radius local
aaa authorization network c2s-authorization local
aaa authorization network R-AUTHO group radius
!
!
!
!
!
aaa session-id common
!
!
!
clock timezone ASD 0
ip source-route
ip cef
!
!
!
!
no ip domain lookup
ip domain name megaupload.com
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
crypto pki trustpoint mudc
 enrollment mode ra
 enrollment url http://10.0.0.10:80/certsrv/mscep/mscep.dll
 serial-number
 revocation-check none
!
!
!
crypto pki certificate map map1 1
 subject-name co r2.megaupload.com
!
crypto pki certificate map map1 10
!
crypto pki certificate chain mudc
 certificate 5000000008FBD20EA977811389000000000008
  3082057C 30820464 A0030201 02021350 00000008 FBD20EA9 77811389 00000000
  0008300D 06092A86 4886F70D 01010505 00304E31 13301106 0A099226 8993F22C
  64011916 03636F6D 311A3018 060A0992 268993F2 2C640119 160A6D65 67617570
  6C6F6164 311B3019 06035504 0313126D 65676175 706C6F61 642D4D55 44432D43
  41301E17 0D313430 37313430 35343930 365A170D 31363037 31333035 34393036
  5A303731 13301106 03550405 130A3432 37393235 36353137 3120301E 06092A86
  4886F70D 01090213 1152322E 6D656761 75706C6F 61642E63 6F6D3082 0122300D
  06092A86 4886F70D 01010105 00038201 0F003082 010A0282 010100A5 92DEDB39
  A2306C28 04456E8E 5B2C086D 017C25CC CB716BCB 0002B034 9B48C501 DFFFCA43
  72BAF9C7 1A64609C 27D15E10 03705184 AD331197 1FF39226 2BB6B127 1C023D8D
  6CB9E9AD FA87C6F1 64BF2D06 A66D9553 069F17F0 E31E3657 777CE35E F776A9CB
  BE404831 530B8007 D000EE01 D83DF89A 2456FED1 29F9B7B2 48BB3A54 DF93EDDE
  8250E336 E9A5DBFA 49CA4D65 F5996D7D 736C409D 08666F3F 9CA061BB CDE1CBE4
  509069C4 45A758F0 57A45530 0FB36605 44F62CB2 981F38D0 48C56FF0 12AF0317
  BC1232BC 24237206 844F88B3 D3765213 67133296 17B2A158 7116FD5B 4D0CF38B
  B96F0B22 A4A25E4A 5CA84787 348EB228 65128252 C80E4662 D2F59302 03010001
  A3820268 30820264 300E0603 551D0F01 01FF0404 030205A0 301D0603 551D0E04
  16041432 16A4035A 0602247C FEDC3C03 172DC6F4 172B4130 1F060355 1D230418
  30168014 C26DB898 A56725C3 DCFC9AB1 67A00A25 FC862406 3081D006 03551D1F
  0481C830 81C53081 C2A081BF A081BC86 81B96C64 61703A2F 2F2F434E 3D6D6567
  6175706C 6F61642D 4D554443 2D43412C 434E3D6D 7564632C 434E3D43 44502C43
  4E3D5075 626C6963 2532304B 65792532 30536572 76696365 732C434E 3D536572
  76696365 732C434E 3D436F6E 66696775 72617469 6F6E2C44 433D6D65 67617570
  6C6F6164 2C44433D 636F6D3F 63657274 69666963 61746552 65766F63 6174696F
  6E4C6973 743F6261 73653F6F 626A6563 74436C61 73733D63 524C4469 73747269
  62757469 6F6E506F 696E7430 81C70608 2B060105 05070101 0481BA30 81B73081
  B406082B 06010505 07300286 81A76C64 61703A2F 2F2F434E 3D6D6567 6175706C
  6F61642D 4D554443 2D43412C 434E3D41 49412C43 4E3D5075 626C6963 2532304B
  65792532 30536572 76696365 732C434E 3D536572 76696365 732C434E 3D436F6E
  66696775 72617469 6F6E2C44 433D6D65 67617570 6C6F6164 2C44433D 636F6D3F
  63414365 72746966 69636174 653F6261 73653F6F 626A6563 74436C61 73733D63
  65727469 66696361 74696F6E 41757468 6F726974 79301F06 03551D11 0101FF04
  15301382 1152322E 6D656761 75706C6F 61642E63 6F6D303F 06092B06 01040182
  37140204 321E3000 49005000 53004500 43004900 6E007400 65007200 6D006500
  64006900 61007400 65004F00 66006600 6C006900 6E006530 13060355 1D25040C
  300A0608 2B060105 05080202 300D0609 2A864886 F70D0101 05050003 82010100
  674CD4DA A66C6A29 C9C36B20 4B34C0F7 A064C8C3 72077B8A 9066DC0E 9D747D01
  BE74EE0C 837B4B2A 2C4FE942 D2FB909D 841E003B D3B061C5 49C3031E D8420C74
  4AD7F6CA 019EE1C6 30AA2973 58082BDC 0658CAB2 B951F0F5 20329DB8 4FF79824
  5796CC71 FD4FB7AE 88B4ADE6 B7157611 EAA7D45D F31A050B 19D3148A 8A106441
  77F032A0 76971B4A 9F656E7E F6EADFF9 42E2B32F 6072EB66 CB2B6495 88759F81
  25519274 1C932EC0 F596E57C 12D865F8 07FB5E4C 0B076946 BA37E74D 4B39D49D
  E365E2F6 98A6B114 7CD16CE6 47EB988C 0C0A81B4 D1BD31AC 1CDA7F98 A6F06B38
  85290035 AD5C3E6F 3EFDF9DC 87F87A6A CA3A76A5 DD04DC2D E5CF01D3 4B52A12C
  	quit
 certificate ca 7B309C62AEC042844E818EDCF1A6FE98
  30820377 3082025F A0030201 0202107B 309C62AE C042844E 818EDCF1 A6FE9830
  0D06092A 864886F7 0D010105 0500304E 31133011 060A0992 268993F2 2C640119
  1603636F 6D311A30 18060A09 92268993 F22C6401 19160A6D 65676175 706C6F61
  64311B30 19060355 04031312 6D656761 75706C6F 61642D4D 5544432D 4341301E
  170D3134 30373031 30383137 32355A17 0D313930 37303130 38323732 355A304E
  31133011 060A0992 268993F2 2C640119 1603636F 6D311A30 18060A09 92268993
  F22C6401 19160A6D 65676175 706C6F61 64311B30 19060355 04031312 6D656761
  75706C6F 61642D4D 5544432D 43413082 0122300D 06092A86 4886F70D 01010105
  00038201 0F003082 010A0282 010100AD 4AA8CDE7 45C440A6 94FB6F88 E7A7A566
  1E1B2BB1 A1144467 3C25FA38 EEFB9EC9 6EB31E23 5085311F 8F5C50D9 DDB36734
  E5C12340 5C3D8A19 027675DA 555C470B B3E4E772 40C5AFB8 282492AD 887E7CE4
  3B5B0BB9 9EFA112C BDD161F0 0C0DE8DA 2B48A71C B395055D B401D631 0BD6B1B1
  A69FA14A F97001BB 4DFC13EA 4BBCFFDF 88FA3F29 1D4DD1B9 CF508F8C 433C9484
  977C071B FEF5FC9D E439D4C2 677105F5 BF3C91D3 74A6F309 19AC88FF FD406A66
  5CC7482D DD2ECBAB 7F30DDE7 8C525708 179EADB9 446400A7 9EBCB49C 0EF7CA38
  7B1BB6F3 6BA4AC5E 9993E8CC 84B42DA6 5C59ECD2 3BD17103 9A1B7471 5138C421
  D7AB6D1F 2A272BB3 761DE398 FE13B302 03010001 A351304F 300B0603 551D0F04
  04030201 86300F06 03551D13 0101FF04 05300301 01FF301D 0603551D 0E041604
  14C26DB8 98A56725 C3DCFC9A B167A00A 25FC8624 06301006 092B0601 04018237
  15010403 02010030 0D06092A 864886F7 0D010105 05000382 01010093 32E4DD1D
  3A4E2126 D7001121 221EDAC4 6F38E342 8E62AF9F A89940CB 625B951F 275DBA13
  AE3CA4FA E99ECBEC 6C0E6FA5 6ABF8C4A 0A119D4F C7806E68 830E4DBE DB99F1C3
  F71989B8 0FBC97DC 6620E92C 5325314F 0FC35C58 D7D2E42B 981A09DE AEF47B10
  F1FE6198 8684F203 C215F8B5 AA2529A1 D15CFD71 68C060EB 0E30EFCF 9E8EF5AC
  98E13375 B2775542 4C652FC7 651B8D16 5796A118 654E5FCD A55FC126 276C4660
  1D0EF0E2 0A5D5960 8FDFD8DC 5FAEDDE1 EE9DF15C 57D522D8 C3DDD3D8 3E1958C0
  CAC7531E 5F2848A8 889A8E59 5801D030 852C7E84 8D0EA9BC 62EB2E87 6D4A34A2
  3A636E20 489A085B 2745354A A4A4EE55 4499AA8B 6C56BFF2 6213CE
  	quit
username admin secret 5 $1$8HLF$9p2ujxvyQo87zDsm4.tF40
!
redundancy
!
!
!
crypto keyring s2s
  pre-shared-key address 1.1.1.3 key cisco123
!
crypto isakmp policy 10
 encr 3des
 authentication pre-share
 group 2
!
crypto isakmp policy 20
 encr aes
 group 5
!
crypto isakmp client configuration group VPN
 key Perse500
 pool c2s-pool
 acl 102
 netmask 255.255.255.0
crypto isakmp profile S2S
   ca trust-point mudc
   match identity address 1.1.1.3 255.255.255.255
   match certificate map1
crypto isakmp profile C2S
   match identity group VPN
   client authentication list R-AUTHE
   isakmp authorization list c2s-authorization
   client configuration address respond
!
!
crypto ipsec transform-set c2s esp-aes esp-md5-hmac
crypto ipsec transform-set s2s esp-3des esp-sha-hmac
!
crypto dynamic-map dynmap 10
 set transform-set c2s
 set isakmp-profile C2S
!
!
crypto map VPN 5 ipsec-isakmp
 set peer 1.1.1.3
 set transform-set s2s
 set isakmp-profile S2S
 match address 103
crypto map VPN 10 ipsec-isakmp dynamic dynmap
!
!
!
!
!
!
interface FastEthernet0/0
 no ip address
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
 !
!
interface FastEthernet0/0.10
 encapsulation dot1Q 10
 ip address 10.0.0.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
!
interface FastEthernet0/1
 ip address 1.1.1.1 255.255.255.0
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 crypto map VPN
 !
!
interface GigabitEthernet1/0
 no ip address
 shutdown
 negotiation auto
 !
!
ip local pool c2s-pool 172.16.1.1 172.16.1.10
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list 101 interface FastEthernet0/1 overload
ip route 10.0.10.0 255.255.255.0 1.1.1.3
!
access-list 1 permit any
access-list 2 permit any
access-list 101 deny   ip 10.0.0.0 0.0.0.255 172.16.1.0 0.0.0.255
access-list 101 deny   ip 10.0.0.0 0.0.0.255 10.0.10.0 0.0.0.255
access-list 101 permit ip any any
access-list 102 permit ip 10.0.0.0 0.0.0.255 172.16.1.0 0.0.0.255
access-list 103 permit ip 10.0.0.0 0.0.0.255 10.0.10.0 0.0.0.255
!
!
!
!
!
radius-server host 10.0.0.100 auth-port 1812 acct-port 1813 key Qwerty1
!
control-plane
 !
!
!
mgcp fax t38 ecm
mgcp behavior g729-variants static-pt
!
!
!
gatekeeper
 shutdown
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line vty 0 4
 login authentication VTY
!
ntp peer 10.0.0.10
end