Current configuration : 10539 bytes
!
! Last configuration change at 14:36:27 CST Fri Nov 17 2017 by admin
!
version 15.5
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no platform punt-keepalive disable-kernel-core
!
hostname Soddy_Daisy-4321
!
boot-start-marker
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging queue-limit
logging buffered 10000000
no logging rate-limit
no logging console
no logging monitor
!
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local
!
!
!
!
!
!
aaa session-id common
clock timezone CST -6 0
clock summer-time CDT recurring
!
!
!
!
!
!
!
!
!
!
!



no ip domain lookup
ip domain name fpucc.local
!
!
!
!
!
!
!
!
!
!
subscriber templating
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
voice service voip
 ip address trusted list
  ipv4 10.11.120.0 255.255.255.0
  ipv4 68.68.123.170 255.255.255.255
  ipv4 10.10.12.11 255.255.255.255
  ipv4 10.10.12.10 255.255.255.255
  ipv4 68.68.117.117 255.255.255.255
  ipv4 68.68.117.116 255.255.255.255
 address-hiding
 mode border-element
 media bulk-stats
 allow-connections sip to sip
 no supplementary-service sip moved-temporarily
 no supplementary-service sip refer
 fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
 sip
  header-passing
  registrar server expires max 600 min 60
  asserted-id pai
  early-offer forced
  midcall-signaling passthru
!
voice class codec 1
 codec preference 1 g711ulaw
 codec preference 2 g711alaw
 codec preference 3 g729r8
!
!
!
voice class e164-pattern-map 100
  e164 4234514018
  e164 4234514019
  e164 4234514020
  e164 7205432228
 !
!
voice class server-group 100
 ipv4 10.10.12.10
 ipv4 10.10.12.11
!
voice class server-group 200
 ipv4 68.68.117.117
 ipv4 68.68.117.116
 description Soddy Daisy Trunks
!
!
voice iec syslog
!
voice register global
 default mode
 no allow-hash-in-dn
 system message Failover Mode
 max-dn 20
 max-pool 20
 timezone 12
!
voice register pool  1
 translation-profile incoming Remove9
 id network 10.11.120.0 mask 255.255.255.0
 proxy 10.10.7.142
 dtmf-relay rtp-nte sip-notify
 voice-class codec 1
 no vad
!
!
voice translation-rule 200
 rule 1 /^\+\(...........$\)/ /\1/
!
voice translation-rule 400
 rule 1 /^....$/ /4234514018/
!
voice translation-rule 500
 rule 1 /^911/ /911/
 rule 2 /9911/ /911/
 rule 3 /^9\(1..........$\)/ /\1/
 rule 4 /^9\(..........$\)/ /\1/
!
!
voice translation-profile Remove9
translate called 500
!
voice translation-profile SRST_CID
translate calling 400
!
!
!
!
application
 global
  service alternate default
 !
!
!
voice-card 0/1
 no watchdog
!
license udi pid ISR4321/K9 sn FDO21270M4A
!
spanning-tree extend system-id
!
username vhodgkins privilege 15 password 7 00341215174C5B140B7018
username admin privilege 15 password 7 1068080A112713080931382C212627162301021F10155E5C7A56471A525C57
!
redundancy
 mode none
!
!
!
!
!
vlan internal allocation policy ascending
!
!
!
!
!
!
!
crypto isakmp policy 1
 encr aes 256
 hash sha256
 authentication pre-share
 group 24
crypto isakmp key itcallsmeonandonacrosstheuniverse address 0.0.0.0
!
!
crypto ipsec transform-set tran1 esp-aes 256 esp-sha256-hmac
 mode tunnel
!
!
crypto ipsec profile pro1
 set transform-set tran1
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 10.10.6.6 255.255.255.255
!
interface Tunnel0
 description DMVPN
 ip address 10.10.5.6 255.255.255.0
 no ip redirects
 ip mtu 1244
 ip nhrp authentication 3ifcnxUj
 ip nhrp map 10.10.5.1 75.131.53.106
 ip nhrp map multicast 75.131.53.106
 ip nhrp network-id 1
 ip nhrp nhs 10.10.5.1
 tunnel source GigabitEthernet0/0/0
 tunnel mode gre multipoint
 tunnel key 1
 tunnel protection ipsec profile pro1
!
interface GigabitEthernet0/0/0
 ip address 12.244.26.142 255.255.255.252
 ip access-group dmvpn in
 negotiation auto
!
interface GigabitEthernet0/0/1
 ip address 10.10.7.142 255.255.255.248
 ip nat inside
 negotiation auto
!
interface Service-Engine0/1/0
!
interface GigabitEthernet0/2/0
 description UPLINK TO ASA
!
interface GigabitEthernet0/2/1
 shutdown
!
interface GigabitEthernet0/2/2
 shutdown
!
interface GigabitEthernet0/2/3
 shutdown
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 no ip address
 ip nat inside
 shutdown
 negotiation auto
!
interface Vlan1
 ip address 10.69.20.1 255.255.255.252
!
!
router eigrp 1
 network 10.10.5.6 0.0.0.0
 network 10.10.6.6 0.0.0.0
 network 10.10.7.142 0.0.0.0
 network 10.69.20.1 0.0.0.0
 redistribute static route-map staticmap
!
ip nat inside source list INTERNET interface GigabitEthernet0/0/0 overload
ip forward-protocol nd
no ip http server
no ip http secure-server
ip tftp source-interface GigabitEthernet0/0/1
ip route 0.0.0.0 0.0.0.0 10.69.20.2
ip route 10.11.20.0 255.255.255.0 10.10.7.137
ip route 10.11.120.0 255.255.255.0 10.10.7.137
ip route 68.68.117.0 255.255.255.0 12.244.26.141
ip route 75.131.53.106 255.255.255.255 12.244.26.141
ip ssh time-out 30
ip ssh version 2
ip ssh pubkey-chain
  username admin
!
!
ip access-list standard ssh-access
 permit 75.131.53.104
 permit 75.131.53.106
 permit 10.0.0.0 0.255.255.255
!
ip access-list extended INTERNET
 permit ip 10.11.20.0 0.0.0.255 any
 permit ip 10.11.120.0 0.0.0.255 any
ip access-list extended dmvpn
 permit tcp host 75.131.53.101 any eq 22
 permit tcp host 75.131.53.100 any eq 22
 permit tcp any any eq 500
 permit udp any any eq isakmp
 permit gre any any
 permit esp any any
 permit ahp any any
 permit icmp any any echo
 permit icmp any any echo-reply
 permit icmp any any time-exceeded
 permit icmp any any unreachable
 permit udp host 68.68.119.167 any
 permit tcp host 68.68.119.167 any
 permit udp host 68.68.123.167 any
 permit tcp host 68.68.123.167 any
 permit udp host 68.68.123.170 any
 permit tcp host 68.68.123.170 any
 permit tcp any any established
 permit udp host 54.193.207.248 any
 permit udp host 64.62.142.12 any
 permit udp 108.161.141.0 0.0.0.255 any
 permit udp 199.231.78.0 0.0.0.255 any
 permit ip 108.161.147.0 0.0.0.255 any
 permit udp host 209.206.52.5 any eq 7351
 permit tcp host 75.131.53.104 any eq 22
 permit udp host 68.68.117.120 any
 permit tcp host 68.68.117.120 any
 permit udp host 68.68.117.117 any
 permit tcp host 68.68.117.117 any
 permit udp host 68.68.117.123 any
 permit tcp host 68.68.117.123 any
 permit ip host 68.68.117.117 any
 permit ip host 68.68.117.120 any
 permit udp host 68.68.117.116 any
 permit tcp host 68.68.117.116 any
 deny   ip any any log
!
!
ip prefix-list REDIS seq 1 permit 10.11.120.0/24
ip prefix-list REDIS seq 5 permit 10.11.20.0/24
logging trap debugging
!
route-map staticmap permit 10
 match ip address REDIS
!
snmp-server community public RO FP-RO
snmp-server community FP-RO RO
!
!
!
!
control-plane
!
!
voice-port 0/1/0
!
voice-port 0/1/1
!
voice-port 0/1/2
 timing hookflash-out 50
 timing guard-out 1000
 connection plar opx 4018
 caller-id enable
!
voice-port 0/1/3
!
voice-port 0/1/4
!
voice-port 0/1/5
 !
 !
 !
 !
!
mgcp
mgcp call-agent 10.10.12.11 2427 service-type mgcp version 0.1
mgcp rtp unreachable timeout 1000 action notify
mgcp modem passthrough voip mode nse
mgcp package-capability rtp-package
mgcp package-capability sst-package
mgcp package-capability pre-package
no mgcp package-capability res-package
no mgcp timer receive-rtcp
mgcp sdp simple
mgcp fax t38 inhibit
mgcp bind control source-interface GigabitEthernet0/0/1
mgcp bind media source-interface GigabitEthernet0/0/1
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
ccm-manager music-on-hold
!
ccm-manager fallback-mgcp
ccm-manager redundant-host 10.10.12.10
ccm-manager mgcp
no ccm-manager fax protocol cisco
ccm-manager config server 10.10.12.11
ccm-manager config
!
dial-peer voice 999010 pots
 service mgcpapp
 port 0/1/0
!
dial-peer voice 999012 pots
 service mgcpapp
 port 0/1/2
!
dial-peer voice 200 voip
 description inbound DP from CUCM
 translation-profile incoming outbound-strip-plus
 session protocol sipv2
 incoming called-number +.T
 voice-class codec 1
 voice-class sip bind control source-interface GigabitEthernet0/0/1
 voice-class sip bind media source-interface GigabitEthernet0/0/1
 dtmf-relay rtp-nte
 no vad
!
dial-peer voice 300 voip
 description outbound to SIP PSTN
 translation-profile outgoing SRST_CID
 destination-pattern .T
 session protocol sipv2
 session target ipv4:68.68.117.117
 session transport udp
 voice-class codec 1
 voice-class sip bind control source-interface GigabitEthernet0/0/0
 voice-class sip bind media source-interface GigabitEthernet0/0/0
 dtmf-relay rtp-nte
 no dtmf-interworking
 no vad
!
dial-peer voice 301 pots
 destination-pattern 911
 port 0/1/2
 forward-digits all
!
dial-peer voice 2001 pots
 preference 2
 destination-pattern .T
 port 0/1/2
!
dial-peer voice 2000 voip
 session protocol sipv2
 session transport udp
 session server-group 100
 destination e164-pattern-map 100
 voice-class codec 1
 voice-class sip bind control source-interface GigabitEthernet0/0/1
 voice-class sip bind media source-interface GigabitEthernet0/0/1
 dtmf-relay rtp-nte
 no vad
!
!
sip-ua
 connection-reuse
!
banner login ^CCCCCCC

***************************************************************************

*      L E G A L   N O T I C E  --  Y O U    M U S T    R E A D           *

***************************************************************************

*                                                                         *

*     You must have explicit permission to access or configure this       *

*      device.  All activities performed on this device are logged and    *

*     violations of this policy may result in criminal prosecution.       *

*                                                                         *


***************************************************************************

*         UNAUTHORIZED ACCESS TO THIS NETWORK DEVICE IS PROHIBITED        *

***************************************************************************





^C
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 access-class ssh-access in
 exec-timeout 60 0
 transport input ssh
line vty 5 15
 access-class ssh-access in
 exec-timeout 60 0
 transport input ssh
!
ntp server pool.ntp.org
!
!
pnp profile pnp_cco_profile
 transport https host devicehelper.cisco.com port 443
end