rendered paste bodyUsing 3816 out of 196600 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname xcm3
!
boot-start-marker
boot-end-marker
!
no logging buffered
enable secret 5
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-2167486914
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2167486914
revocation-check none
rsakeypair TP-self-signed-2167486914
!
!
crypto pki certificate chain TP-self-signed-2167486914
certificate self-signed 01 nvram:IOS-Self-Sig#35.cer
dot11 syslog
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.11.1 192.168.11.49
ip dhcp excluded-address 192.168.11.100 192.168.11.254
!
ip dhcp pool LAN
network 192.168.11.0 255.255.255.0
default-router 192.168.11.1
dns-server 192.168.2.254
!
!
!
multilink bundle-name authenticated
!
!
!
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp key
!
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
!
crypto map SDM_CMAP_1 1 ipsec-isakmp
description Tunnel to66.46.40.24
set peer 66.46.40.24
set transform-set ESP-3DES-SHA
match address 100
!
archive
log config
hidekeys
!
!
!
class-map match-any voicetraffic
match ip dscp ef
match ip dscp cs5
match ip dscp cs7
!
!
policy-map VoiceQoS
class voicetraffic
priority 600
policy-map VoiceQoSLAN
class voicetraffic
priority 1000
!
!
!
!
interface Tunnel0
ip address 192.168.100.46 255.255.255.252
ip mtu 1420
tunnel source FastEthernet0
tunnel destination 66.46.40.24
tunnel path-mtu-discovery
crypto map SDM_CMAP_1
!
interface Tunnel10
description NS
ip address 192.168.74.45 255.255.255.252
tunnel source 173.209.137.152
tunnel destination 71.33.240.50
!
interface FastEthernet0
description WAN
bandwidth 800
ip address 173.209.137.152 255.255.255.252
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
crypto map SDM_CMAP_1
service-policy output VoiceQoS
!
interface FastEthernet1
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet2
service-policy output VoiceQoSLAN
!
interface FastEthernet3
service-policy output VoiceQoSLAN
!
interface FastEthernet4
service-policy output VoiceQoSLAN
!
interface FastEthernet5
service-policy output VoiceQoSLAN
!
interface FastEthernet6
service-policy output VoiceQoSLAN
!
interface FastEthernet7
service-policy output VoiceQoSLAN
!
interface FastEthernet8
service-policy output VoiceQoSLAN
!
interface FastEthernet9
service-policy output VoiceQoSLAN
!
interface Vlan1
description LAN
ip address 192.168.11.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Async1
no ip address
encapsulation slip
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 173.209.137.157
ip route 192.168.2.0 255.255.255.0 Tunnel0
ip route 192.168.80.0 255.255.255.0 192.168.75.46
ip route 192.168.80.0 255.255.255.0 192.168.74.46
!
!
ip http server
ip http authentication local
ip http secure-server
no ip nat service sip udp port 5060
no ip nat service allow-sip-even-rtp-port
ip nat inside source route-map SDM_RMAP_1 interface FastEthernet0 overload
!
access-list 100 remark SDM_ACL Category=4
access-list 100 permit gre host 173.209.137.152 host 66.46.40.24
ip nat inside source route-map SDM_RMAP_1 interface FastEthernet0 overload
!
access-list 100 remark SDM_ACL Category=4
access-list 100 permit gre host 173.209.137.152 host 66.46.40.24
access-list 110 remark SDM_ACL Category=16
access-list 110 deny gre host 173.209.137.152 host 66.46.40.24
access-list 110 permit ip 192.168.11.0 0.0.0.255 any
!
!
!
route-map SDM_RMAP_1 permit 1
match ip address 110
!
!
!
!
control-plane
!
!
line con 0
line 1
modem InOut
stopbits 1
speed 115200
flowcontrol hardware
line aux 0
line vty 0 4
login local
!
end