edge


!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Benton
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 debugging
!
no aaa new-model
ip cef
!
!
!
!
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
crypto pki trustpoint TP-self-signed-3899094249
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-3899094249
 revocation-check none
 rsakeypair TP-self-signed-3899094249
!
!
crypto pki certificate chain TP-self-signed-3899094249
 certificate self-signed 01
  3082023E 308201A7 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 33383939 30393432 3439301E 170D3130 30323039 31393333
  32305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38393930
  39343234 3930819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  8100DC21 0E38A57E 021ECD2A 75346C0A DFA6ADD1 25C087CB ED237389 45AA933B
  6F038CA2 2171720E 199895C5 F1ADD817 F1EB3D55 667C80B2 12CE6762 F5534803
  B4691911 B6CEA792 5DD5984A 8B4E59E1 E5387B1A 11A17FD0 E8C112F9 587CE1A7
  35D28067 F95135F3 C760AB27 D307AFF6 28B7CFBE 81832EDD 45815401 D27875E3
  0F410203 010001A3 66306430 0F060355 1D130101 FF040530 030101FF 30110603
  551D1104 0A300882 0642656E 746F6E30 1F060355 1D230418 30168014 480ECB4B
  487A361C 3D5967E0 7847B3A5 3A9157CF 301D0603 551D0E04 16041448 0ECB4B48
  7A361C3D 5967E078 47B3A53A 9157CF30 0D06092A 864886F7 0D010104 05000381
  8100CA67 9D6EDEA4 1F3A0B73 1FCBA314 3B10E3FA 672548D9 4935B44E 71C50A5D
  24E14C14 2EA123C2 4D4DDB88 81E3D9B9 7C72E820 09F67467 56F15B0D FDCEE5CA
  A255AEE2 3AC76994 7A0BC805 26F39A99 0E182C4C 901C1787 883BB939 C1C5F211
  3613215C 4F37917E 56F0F23A 6EB4CD2C F027BDE3 FE5212A2 4281BC10 A8767431 B24D
  quit
username edge privilege 15 secret 5 <REMOVED>
!
!
!
!
crypto isakmp policy 1
 encr 3des
 authentication pre-share
 group 2
crypto isakmp key <REMOVED> address 74.xx.127.44
!
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
!
crypto map SDM_CMAP_1 1 ipsec-isakmp
 description Tunnel to74.xx.127.44
 set peer 74.xx.127.44
 set transform-set ESP-3DES-SHA
 match address 100
!
!
!
interface FastEthernet0/0
 ip address 172.16.2.1 255.255.254.0
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface FastEthernet0/1
 ip address 74.xx.127.43 255.255.255.192
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 crypto map SDM_CMAP_1
!
interface Serial0/0/0
 no ip address
 shutdown
!
ip forward-protocol nd
!
!
ip http server
ip http authentication local
ip http secure-server
ip nat inside source route-map SDM_RMAP_1 interface FastEthernet0/1 overload
!
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 172.16.2.0 0.0.1.255
access-list 100 remark SDM_ACL Category=4
access-list 100 remark IPSec Rule
access-list 100 permit ip 172.16.2.0 0.0.1.255 172.16.4.0 0.0.1.255
access-list 101 remark SDM_ACL Category=2
access-list 101 remark IPSec Rule
access-list 101 deny   ip 172.16.2.0 0.0.1.255 172.16.4.0 0.0.1.255
access-list 101 permit ip 172.16.2.0 0.0.1.255 any
!
route-map SDM_RMAP_1 permit 1
 match ip address 101
!
!
!
control-plane
!
!
!
line con 0
 logging synchronous
line aux 0
line vty 0 4
 privilege level 15
 login local
 transport input telnet ssh
!
scheduler allocate 20000 1000
end