MainRT

version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname MainRT
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
ip cef
!
!
!
!
no ip domain lookup
ip domain name lab.local
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
 log config
  hidekeys
!
!
crypto isakmp policy 10
 encr aes
 authentication pre-share
 group 5
crypto isakmp key testkey address 87.55.43.2 255.255.255.248
crypto isakmp key testkey address 87.55.42.1 255.255.255.248
!
!
crypto ipsec transform-set AES128-SHA esp-aes esp-sha-hmac
!
crypto ipsec profile IPSECPROFILE10
 set transform-set AES128-SHA
!
!
!
!
!
class-map type inspect match-any OUTSIDE-INSIDE-CLASS
 match access-group 110
 match protocol http
 match protocol https
 match protocol smtp
class-map type inspect match-any INSIDE-OUTSIDE-CLASS
 match protocol smtp
 match protocol https
 match protocol http
 match protocol dns
!
!
policy-map type inspect OUTSIDE-INSIDE-POLICY
 class type inspect OUTSIDE-INSIDE-CLASS
  pass
 class class-default
policy-map type inspect INSIDE-OUTSIDE-POLICY
 class type inspect INSIDE-OUTSIDE-CLASS
  pass
 class class-default
!
zone security OUTSIDE
zone security INSIDE
zone-pair security OUTSIDE-INSIDE-PAIR source OUTSIDE destination INSIDE
zone-pair security INSIDE-OUTSIDE-PAIR source INSIDE destination OUTSIDE
!
!
!
!
interface Tunnel1
 ip address 10.10.10.1 255.255.255.0
 no ip redirects
 ip nhrp authentication nhrp1
 ip nhrp map multicast dynamic
 ip nhrp network-id 1
 zone-member security INSIDE
 ip ospf network broadcast
 ip ospf cost 10
 ip ospf priority 200
 ip ospf 1 area 0
 tunnel source FastEthernet0/0
 tunnel mode gre multipoint
 tunnel key 1
 tunnel protection ipsec profile IPSECPROFILE10
!
interface Tunnel2
 ip address 11.11.11.1 255.255.255.0
 no ip redirects
 ip nhrp authentication nhrp2
 ip nhrp map multicast dynamic
 ip nhrp network-id 2
 zone-member security INSIDE
 ip ospf network broadcast
 ip ospf cost 20
 ip ospf priority 200
 ip ospf 1 area 0
 tunnel source FastEthernet0/1
 tunnel mode gre multipoint
 tunnel key 2
 tunnel protection ipsec profile IPSECPROFILE10
!
interface FastEthernet0/0
 ip address 87.55.45.1 255.255.255.248
 zone-member security OUTSIDE
 duplex auto
 speed auto
!
interface FastEthernet0/1
 ip address 87.55.44.1 255.255.255.248
 zone-member security OUTSIDE
 duplex auto
 speed auto
!
interface FastEthernet1/0
 ip address 192.168.2.254 255.255.255.0
 zone-member security INSIDE
 ip ospf 1 area 0
 duplex auto
 speed auto
!
router ospf 1
 log-adjacency-changes
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 87.55.45.6 10
ip route 0.0.0.0 0.0.0.0 87.55.44.6 20
!
!
no ip http server
no ip http secure-server
!
access-list 100 permit ip 192.168.2.0 0.0.0.255 any
access-list 110 permit ip any 192.168.2.0 0.0.0.255
access-list 110 permit ip any 87.55.43.0 0.0.0.7
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line aux 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line vty 0 4
 login
!
ntp server 87.55.45.6
!
end