version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CUBE
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
clock timezone GMT 0 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!


!
!
!
!
ip name-server 10.0.0.11
ip name-server 10.0.0.12
ip name-server 10.0.0.13
ip name-server 10.0.0.14
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
cts logging verbose
!
voice-card 0
!
!
voice call send-alert
voice rtp send-recv
!
voice service voip
 no ip address trusted authenticate
 allow-connections sip to sip
 fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
 h323
 sip
  min-se 900 session-expires 900
  registrar server
!
!
voice class uri IN sip
 host ipv4:10.0.0.211
 host ipv4:10.0.0.212
voice class codec 1
 codec preference 1 g711ulaw
!
voice class h323 1
  h225 timeout tcp establish 3
!
!
voice class sip-profiles 1
!
!
!
voice translation-rule 5
 rule 1 /^9\(1[2-9]..[2-9]......\)$/ /\1/
 rule 2 /^9\([2-9]......\)$/ /1000\1/
 rule 5 /^\(.......\)$/ /1000\1/
!
!
voice translation-profile addlocal
 translate called 5
!
!
!
media profile recorder 3000
 media-type audio
 media-recording 2500
!
media class 3
 recorder profile 3000
 description Recorder
!
license udi pid CISCO2901/K9 sn FTX181781ZZ
license boot module c2900 technology-package securityk9
license boot module c2900 technology-package uck9
license boot module c2900 technology-package datak9
hw-module pvdm 0/0
!
!
!
redundancy
!
!
!
!
!
!
!
crypto isakmp policy 1
!
!
!
!
bridge irb
!
!
!
!
interface Embedded-Service-Engine0/0
 no ip address
 shutdown
!
interface GigabitEthernet0/0
 no ip address
 duplex auto
 speed auto
!
interface GigabitEthernet0/0.10
 description ServerNet
 encapsulation dot1Q 10
 bridge-group 10
!
interface GigabitEthernet0/0.11
 description ClientNet
 encapsulation dot1Q 11
 bridge-group 11
!
interface GigabitEthernet0/0.12
 description DMZNet
 encapsulation dot1Q 12
 bridge-group 12
!
interface GigabitEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface GigabitEthernet0/1/0
 switchport trunk native vlan 10
 switchport trunk allowed vlan 1,2,10-12,1002-1005
 switchport mode trunk
 no ip address
!
interface GigabitEthernet0/1/1
 switchport trunk native vlan 10
 switchport trunk allowed vlan 1,2,10-12,1002-1005
 switchport mode trunk
 no ip address
!
interface GigabitEthernet0/1/2
 switchport trunk native vlan 10
 switchport trunk allowed vlan 1,2,10-12,1002-1005
 switchport mode trunk
 no ip address
!
interface GigabitEthernet0/1/3
 switchport trunk native vlan 10
 switchport trunk allowed vlan 1,2,10-12,1002-1005
 switchport mode trunk
 no ip address
!
interface GigabitEthernet0/1/4
 switchport trunk native vlan 10
 switchport trunk allowed vlan 1,2,10-12,1002-1005
 switchport mode trunk
 no ip address
!
interface GigabitEthernet0/1/5
 switchport trunk native vlan 10
 switchport trunk allowed vlan 1,2,10-12,1002-1005
 switchport mode trunk
 no ip address
!
interface GigabitEthernet0/1/6
 switchport trunk native vlan 10
 switchport trunk allowed vlan 1,2,10-12,1002-1005
 switchport mode trunk
 no ip address
!
interface GigabitEthernet0/1/7
 switchport trunk native vlan 10
 switchport trunk allowed vlan 1,2,10-12,1002-1005
 switchport mode trunk
 no ip address
!
interface Vlan1
 no ip address
!
interface Vlan10
 no ip address
 bridge-group 10
!
interface Vlan11
 no ip address
 bridge-group 11
!
interface Vlan12
 no ip address
 bridge-group 12
!
interface BVI10
 ip address 10.0.0.222 255.255.255.0 secondary
 ip address 10.0.0.221 255.255.255.0
 ip helper-address 10.0.0.104
 ip helper-address 10.0.0.105
 ip nbar protocol-discovery
 h323-gateway voip interface
!
interface BVI11
 ip address 10.0.1.10 255.255.255.0
!
interface BVI12
 ip address 10.0.2.10 255.255.255.0
!
!
ip local pool ap_phonevpn 10.0.0.180 10.0.0.185
ip default-gateway 10.0.0.20
ip forward-protocol nd
!
ip http server
ip http authentication local
ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 BVI10 10.0.0.20
!
!
!
!
control-plane
!
bridge 10 protocol ieee
bridge 10 route ip
bridge 11 protocol ieee
bridge 11 route ip
bridge 12 protocol ieee
bridge 12 route ip
!
voice-port 0/2/0
 supervisory disconnect dualtone mid-call
 input gain 2
 output attenuation -6
 echo-cancel coverage 32
 cptone GB
 timeouts interdigit 2
 timeouts call-disconnect 5
 timeouts wait-release 5
 timing sup-disconnect 80
 connection plar opx 100
 impedance complex2
 caller-id enable
!
voice-port 0/2/1
!
voice-port 0/2/2
!
voice-port 0/2/3
 !
 !
 !
 !
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
dial-peer voice 1 pots
 description Outgoing Landline Calls From CUCM
 destination-pattern ..........
 port 0/2/0
!
dial-peer voice 2 voip
 description Incoming Landline Calls To CUCM
 destination-pattern 1
 session target ipv4:10.0.0.211
 dtmf-relay h245-alphanumeric h245-signal
!
dial-peer voice 101 voip
 description *** Outgoing Flowroute ***
 translation-profile outgoing addlocal
 destination-pattern 1[2-9]..[2-9]......
 media forking
 session protocol sipv2
 session target dns:sip.flowroute.com
 voice-class codec 1
 voice-class sip asserted-id pai
 voice-class sip profiles 1
 media-class 3
 dtmf-relay sip-kpml rtp-nte
 no vad
!
dial-peer voice 102 voip
 description *** Outgoing International ***
 destination-pattern 011T
 media forking
 session protocol sipv2
 session target dns:sip.flowroute.com
 voice-class codec 1
 no voice-class sip asserted-id
 voice-class sip profiles 1
 media-class 3
 dtmf-relay sip-kpml rtp-nte
 no vad
!
dial-peer voice 100 voip
 description CUCM INBOUND
 media forking
 session protocol sipv2
 session target sip-server
 incoming uri via IN
 voice-class sip bind control source-interface BVI10
 voice-class sip bind media source-interface BVI10
 dtmf-relay sip-kpml rtp-nte
 codec g711ulaw
 no vad
!
dial-peer voice 2500 voip
 description Recorder
 destination-pattern .T
 session protocol sipv2
 session target ipv4:10.0.0.218
 session transport udp
!
!
sip-ua
 credentials realm sip.flowroute.com
 authentication  realm sip.flowroute.com
 no remote-party-id
 disable-early-media 180
 retry invite 3
 retry bye 3
 retry cancel 3
 retry register 3
 registrar dns:sip.flowroute.com expires 600
 sip-server dns:sip.flowroute.com
!
!
!
gatekeeper
 shutdown
!
!
 vstack
!
line con 0
line aux 0
line 2
 no activation-character
 no exec
 transport preferred none
 transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
 stopbits 1
line vty 0 4
 login
 transport input ssh
!
scheduler allocate 20000 1000
ntp master
ntp server 0.pool.ntp.org source BVI10
!
!
webvpn gateway SSL
 ip address 10.0.0.221 port 443
 http-redirect port 80
 ssl encryption aes128-sha1
 ssl trustpoint server-certificate
 inservice
 !
webvpn context SSL
 gateway SSL domain SSLPhones
 authentication certificate
 ca trustpoint CAPF
 !
 ssl authenticate verify all
 inservice
 !
 policy group phones
   functions svc-enabled
   svc address-pool "ap_phonevpn" netmask 255.255.255.0
   svc keep-client-installed
 default-group-policy phones
!
end

CUBE(config)#