version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname mfa-odn-columbia
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$Ox4L$tGdyPlBRSPOPdBxGC.Ljj.
!
no aaa new-model
!
!
!
!
crypto pki trustpoint TP-self-signed-2290911354
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2290911354
 revocation-check none
 rsakeypair TP-self-signed-2290911354
!
!
crypto pki certificate chain TP-self-signed-2290911354
 certificate self-signed 01 nvram:IOS-Self-Sig#2.cer
no ip source-route
!
!
!
!
ip cef
no ip domain lookup
ip domain name mfaodntest.com
no ipv6 cef
!
!
multilink bundle-name authenticated
license udi pid CISCO891-K9 sn FTX15218311
!
!
username root privilege 15 password 7 123601194A5A5C55
!
!
ip ssh rsa keypair-name mfa-odn-columbia.mfaodntest.com
ip ssh version 2
!
!
crypto isakmp policy 1
 encr aes
 authentication pre-share
 group 5
crypto isakmp key e254zh98 address 100.42.0.188
!
!
crypto ipsec transform-set esp-aes-sha esp-aes esp-sha-hmac
!
crypto map vpn 10 ipsec-isakmp
 set peer 100.42.0.188
 set transform-set esp-aes-sha
 match address 101
!
!
!
!
!
interface Loopback0
 ip address 100.100.100.100 255.255.255.255
 ip nat outside
 ip virtual-reassembly
 shutdown
 !
!
interface FastEthernet0
 !
!
interface FastEthernet1
 !
!
interface FastEthernet2
 switchport access vlan 2
 no keepalive
 !
!
interface FastEthernet3
 !
!
interface FastEthernet4
 !
!
interface FastEthernet5
 !
!
interface FastEthernet6
 !
!
interface FastEthernet7
 !
!
interface FastEthernet8
 no ip address
 ip virtual-reassembly
 shutdown
 duplex auto
 speed auto
 !
!
interface GigabitEthernet0
 ip address 216.106.7.150 255.255.255.224
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
 crypto map vpn
 !
!
interface Vlan1
 no ip address
 !
!
interface Vlan2
 ip address 10.1.0.112 255.255.240.0
 ip nat inside
 ip virtual-reassembly
 no autostate
 !
!
interface Async1
 no ip address
 encapsulation slip
 !
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
!
!
ip nat inside source list NAT interface GigabitEthernet0 overload
ip route 0.0.0.0 0.0.0.0 216.106.7.129
!
ip access-list extended NAT
 deny   ip 10.1.0.0 0.0.15.255 192.168.56.0 0.0.0.255
 deny   ip 10.1.0.0 0.0.15.255 10.237.1.0 0.0.0.15
 permit ip 10.1.0.0 0.0.15.255 any
!
access-list 101 permit ip 10.1.0.0 0.0.15.255 10.237.1.0 0.0.0.15
access-list 101 permit ip 10.1.0.0 0.0.15.255 192.168.56.0 0.0.0.255
!
!
!
!
!
!
control-plane
 !
!
!
line con 0
 logging synchronous
 login local
line 1
 modem InOut
 stopbits 1
 speed 115200
 flowcontrol hardware
line aux 0
line vty 0 4
 password 7 09434A0741544743
 login local
 transport preferred ssh
 transport input telnet ssh
line vty 5 15
 login local
 transport preferred ssh
!
scheduler max-task-time 5000
end