HQ – Main – Corp
en
conf ter
username ISP1 password cisco123
int s0/0/0
encapsulation ppp
ppp authentication chap
exit

interface tunnel 0
ip address 172.16.1.1 255.255.255.252
tunnel source s0/0/0
tunnel destination 209.165.200.225
exit

router ospf 1
network 192.168.2.0 0.0.0.255 area 0
network 172.16.1.0 0.0.0.3 area 0
exit

router bgp 65020
network 209.165.202.128 mask 255.255.255.224
neighbor 209.165.200.230 remote-as 65001
exit

Access-list 1 permit 192.168.2.0 0.0.0.255

ip access-list extended HTTP_ACCESS
permit tcp 209.165.200.224 0.0.0.3 host 209.165.202.158 eq 80
permit tcp 209.165.200.236 0.0.0.3 host 209.165.202.158 eq 80
permit ip 192.168.2.0 0.0.0.255 any
permit icmp any any echo-reply
deny ip any any

int g0/1
ip access-group HTTP_ACCESS out
exit

ipv6 access-list HTTP6_ACCESS
permit tcp 2001:DB8:ACAD::/63 host 2001:DB8:ACAD:B::158 eq 80
permit tcp 2001:DB8:ACAD:3::/64 host 2001:DB8:ACAD:B::158 eq 80
permit ipv6 2001:DB8:ACAD:2::/64 any
permit icmp any any echo-reply
deny ipv6 any any

interface g0/1
ipv6 traffic-filter HTTP6_ACCESS out



Branch – Remote – Branch1
en
conf ter
username ISP1 password cisco123
int s0/0/0
encapsulation ppp
ppp authentication chap
exit

interface tunnel 0
ip address 172.16.1.2 255.255.255.252
tunnel source s0/0/0
tunnel destination 209.165.200.229
exit

router ospf 1
network 192.168.0.0 0.0.1.255 area 0
network 172.16.1.0 0.0.0.3 area 0
exit

Access-list 1 permit 192.168.0.0 0.0.1.255



Customer – Other – Branch2
en
conf ter
Access-list 1 permit 192.168.3.0 0.0.0.255

ip access-list standard VTY_ADMIN
permit 192.168.3.0 0.0.0.255
permit 209.165.200.225 0.0.0.3
deny any
Line vty 0 4
Access-class VTY_ADMIN in