Example - Router config

version 15.1
service timestamps log datetime msec
no service timestamps debug datetime msec
service password-encryption
security passwords min-length 10
!
hostname HQ_1
!
logging userinfo
login block-for 180 attempts 3 within 30
login on-failure log
login on-success log
!
!
enable secret 5 $1$mERr$9cTjUIEqNGurQiFU.ZeCi1
!
!
!
!
!
aaa new-model
!
aaa authentication login SRV group radius local enable
!
!
!
!
!
!
!
no ip cef
no ipv6 cef
!
!
!
username admin privilege 15 secret 5 $1$mERr$WvpW0n5HghRrqnrwXCUUl.
!
!
license udi pid CISCO2911/K9 sn FTX15243MB8
!
!
!
!
!
!
!
!
!
ip ssh version 2
ip ssh time-out 60
ip domain-name contoso.com
ip name-server 192.168.1.2
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface GigabitEthernet0/0
 description TO HQ_2
 ip address 172.20.5.1 255.255.255.252
 duplex auto
 speed auto
!
interface GigabitEthernet0/1
 no ip address
 duplex auto
 speed auto
!
interface GigabitEthernet0/1.10
 description VLAN 10
 encapsulation dot1Q 10
 ip address 192.168.1.253 255.255.255.0
 standby 1 ip 192.168.1.1
 standby 1 priority 105
 standby 1 preempt
!
interface GigabitEthernet0/1.20
 description VLAN 20
 encapsulation dot1Q 20 native
 ip address 192.168.2.253 255.255.255.0
 standby 2 ip 192.168.2.1
 standby 2 priority 105
 standby 2 preempt
!
interface GigabitEthernet0/1.99
 description VLAN 99
 encapsulation dot1Q 99
 ip address 192.168.99.253 255.255.255.0
 standby 3 ip 192.168.99.1
 standby 3 priority 105
 standby 3 preempt
!
interface GigabitEthernet0/2
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface GigabitEthernet0/0/0
 description ISP 1
 ip address 200.1.1.1 255.255.255.252
!
interface GigabitEthernet0/1/0
 description TO Team Office
 ip address 172.20.5.13 255.255.255.252
!
interface GigabitEthernet0/2/0
 description TO Edinburg_2
 ip address 172.20.5.9 255.255.255.252
!
interface GigabitEthernet0/3/0
 description TO SW_CORE
 ip address 172.20.5.42 255.255.255.252
!
interface Vlan1
 no ip address
 shutdown
!
router eigrp 10
 eigrp router-id 60.60.60.60
 variance 3
 redistribute static
 passive-interface GigabitEthernet0/1
 passive-interface GigabitEthernet0/0/0
 passive-interface GigabitEthernet0/1.10
 passive-interface GigabitEthernet0/1.20
 passive-interface GigabitEthernet0/1.99
 network 172.20.5.0 0.0.0.3
 network 172.20.5.8 0.0.0.3
 network 172.20.5.12 0.0.0.3
 network 172.20.5.40 0.0.0.3
 network 192.168.1.0
 network 192.168.2.0
 network 192.168.99.0

!
ip classless
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0/0
!
ip flow-export version 9
!
!
ip access-list extended sl_def_acl
 deny tcp any any eq telnet
 deny tcp any any eq www
 deny tcp any any eq 22
 permit tcp any any eq 22
!
banner login  Welcome to HQ1 Router CONTOSO.COM 
banner motd  Unauthorized access to this device is prohibited! 
!
radius-server host 192.168.1.4 auth-port 1645 key P@ssw0rd
!
!
!
logging 192.168.1.3
line con 0
 exec-timeout 5 0
 password 7 0822455D0A165445415F59
 logging synchronous
 login authentication SRV
!
line aux 0
!
line vty 0 4
 exec-timeout 5 0
 password 7 0822455D0A165445415F59
 logging synchronous
 login authentication SRV
 transport input ssh
 transport output ssh
line vty 5 15
 exec-timeout 5 0
 password 7 0822455D0A165445415F59
 logging synchronous
 login authentication SRV
 transport input ssh
 transport output ssh
!
!
ntp authentication-key 1 md5 08116C5D1A0E550516 7
ntp authenticate
ntp trusted-key 1
ntp server 192.168.1.3 key 1
ntp update-calendar
!
end