BR2-VE01

system
 idle-timeout            300
 host-name               BR2-VE01
 system-ip               172.32.102.1
 site-id                 102
 admin-tech-on-failure
 no route-consistency-check
 sp-organization-name    Testlab
 organization-name       Testlab
 clock timezone America/Edmonton
 vbond vbond.testlab.com
 aaa
  auth-order local radius tacacs
  usergroup basic
   task system read write
   task interface read write
  !
  usergroup netadmin
  !
  usergroup operator
   task system read
   task interface read
   task policy read
   task routing read
   task security read
  !
  user admin
   password $6$kH75sg==$f13M5jBMkQhHlAkB8jRoAyasPAMnAxQXyG6240W.4/.xi4HWMDWRsN3QSvXx4q.JU30yS03/.GzfyIRFuyi.p0
  !
 !
 logging
  disk
   enable
  !
 !
 ntp
  server 10.20.2.10
   version 4
   prefer
  exit
 !
!
omp
 no shutdown
 graceful-restart
 advertise bgp
 advertise ospf external
 advertise connected
 advertise static
!
security
 ipsec
  authentication-type sha1-hmac ah-sha1-hmac
 !
!
vpn 0
 name MGMT
 dns 10.10.13.5 secondary
 dns 10.20.2.10 primary
 host vbond.testlab.com ip 10.10.21.93 10.10.21.94
 interface ge0/0
  ip address 10.8.102.1/24
  tunnel-interface
   encapsulation ipsec
   color biz-internet
   allow-service all
   no allow-service bgp
   allow-service dhcp
   allow-service dns
   allow-service icmp
   no allow-service sshd
   no allow-service netconf
   no allow-service ntp
   no allow-service ospf
   no allow-service stun
   allow-service https
  !
  no shutdown
 !
 interface ge0/1
  ip address 10.9.102.1/24
  tunnel-interface
   encapsulation ipsec
   color mpls
   allow-service all
   no allow-service bgp
   allow-service dhcp
   allow-service dns
   allow-service icmp
   no allow-service sshd
   no allow-service netconf
   no allow-service ntp
   no allow-service ospf
   no allow-service stun
   allow-service https
  !
  no shutdown
 !
 ip route 0.0.0.0/0 10.8.102.254
 ip route 0.0.0.0/0 10.9.102.254