! version 15.1 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname REMBANG ! boot-start-marker boot-end-marker ! ! enable secret 5 $1$c1mM$3C0R.tH/x3rg3.lhShsRQ/ ! no aaa new-model ! no ipv6 cef ip source-route ip cef ! ! ! ! ! multilink bundle-name authenticated ! ! ! ! ! crypto pki token default removal timeout 0 ! crypto pki trustpoint TP-self-signed-2373575831 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-2373575831 revocation-check none rsakeypair TP-self-signed-2373575831 ! ! crypto pki certificate chain TP-self-signed-2373575831 certificate self-signed 01 30820254 308201BD A0030201 02020101 300D0609 2A864886 F70D0101 04050030 31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 69666963 6174652D 32333733 35373538 3331301E 170D3131 30333232 30353238 33335A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 33373335 37353833 3130819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 81008253 27408FAE D6723EC4 ABA913A5 CE46C677 B981E8E4 8659FDB7 226375D3 457EB4DD F757DC90 5BD3F583 453D1E19 76FF15E7 59D31DFB 614F636E 9AFC1120 28458411 992D0E3F 2E0B3979 082F22C5 FAAA22BA DD0F6D07 5AF7F496 00870C5A 2C4EF6CE 7FF2036A 74059565 A30B29CE 62C69B26 F09C480B DDFA7A0F AD43BD2B 20490203 010001A3 7C307A30 0F060355 1D130101 FF040530 030101FF 30270603 551D1104 20301E82 1C555447 535F4241 54555241 4A412E79 6F757264 6F6D6169 6E2E636F 6D301F06 03551D23 04183016 8014C980 82A2C152 9BD661EA 5141D62D 40675249 01D2301D 0603551D 0E041604 14C98082 A2C1529B D661EA51 41D62D40 67524901 D2300D06 092A8648 86F70D01 01040500 03818100 3C8DCCC8 A95D8DA6 67524901 D2300D06 092A8648 86F70D01 01040500 03818100 3C8DCCC8 A95D8DA6 D8FB51C7 3D51C414 D6DE1EA4 48B3BF5E C25AD7A4 16BD83A0 D7C89B39 74D1E03E A15B2BBD A09DB85B 282066CD 2F2A709E 38A4E7D3 9F9B6518 2FBCAB04 818C61F8 300519C4 DECA0392 72E20BC2 843249DA B1ECC631 CA68C8A0 quit voice-card 0 ! ! ! ! ! ! ! license udi pid CISCO2911/K9 sn FGL152310ZM hw-module pvdm 0/0 ! ! ! username admin privilege 5 secret 5 $1$5eoH$P0a9wxZT.1oQEBs3a.pQx1 ! redundancy ! ! ! class-map match-any VoIP_Real_Time match ip precedence 3 5 class-map match-any Routing_Protocol match ip precedence 6 class-map match-any VoIP_Control match access-group name VoIP-Control class-map match-any VPN_Real_Time match access-group name MsSQL-Traffic class-map match-any VoIP_Data match access-group name VoIP-Data class-map match-any Other_Traffic match ip precedence 1 match ip precedence 4 match ip precedence 6 match ip precedence 7 class-map match-any VPN_IP_Critical match access-group name Telnet_Traffic ! ! policy-map Reset-VPN-Package2_VOIP class VoIP_Data set ip precedence 5 class VoIP_Control set ip precedence 3 class VPN_Real_Time set ip precedence 3 class VPN_IP_Critical set ip precedence 2 class Other_Traffic set ip precedence 0 policy-map VoIP_And_Real_Time class VoIP_Data priority percent 99 class class-default fair-queue random-detect policy-map Managed-Package2_VOIP class VoIP_Real_Time bandwidth percent 30 shape peak percent 30 service-policy VoIP_And_Real_Time class VPN_IP_Critical bandwidth percent 40 random-detect class Routing_Protocol bandwidth percent 5 random-detect class class-default fair-queue random-detect ! ! ! ! ! interface GigabitEthernet0/0 description Connected to LAN ip address 192.168.5.252 255.255.255.0 ip flow ingress duplex auto speed auto service-policy input Reset-VPN-Package2_VOIP ! interface GigabitEthernet0/1 description Connected to WAN ip address 172.17.88.250 255.255.255.252 ip flow ingress duplex auto speed auto max-reserved-bandwidth 99 service-policy output Managed-Package2_VOIP ! interface GigabitEthernet0/2 no ip address shutdown duplex auto speed auto ! ip forward-protocol nd ! no ip http server no ip http secure-server ! ip route 0.0.0.0 0.0.0.0 172.17.88.249 ! ip access-list extended MsSQL-Traffic permit tcp any any eq 1434 permit tcp any eq 1434 any permit udp any any eq 1434 permit udp any eq 1434 any ip access-list extended Telnet-Traffic permit tcp any any eq telnet permit tcp any eq telnet any ip access-list extended VoIP-Control remark H.323 permit tcp any any eq 1720 permit tcp any any range 11000 11999 remark MGCP permit udp any any eq 2427 permit tcp any any eq 2428 remark Cisco Skinny permit tcp any any range 2000 2002 ip access-list extended VoIP-Data permit udp any any range 16384 32767 ! logging history debugging logging trap warnings logging source-interface GigabitEthernet0/0 ! ! ! control-plane ! ! voice-port 0/0/0 cptone ID ! voice-port 0/0/1 cptone ID ! ! ! mgcp profile default ! ! dial-peer voice 12 voip description To Melak destination-pattern 8110 session target ipv4:172.17.88.186 ip qos dscp cs5 media ip qos dscp cs3 signaling ! dial-peer voice 13 voip description To Melak destination-pattern 8111 session target ipv4:172.17.88.186 ip qos dscp cs5 media ip qos dscp cs3 signaling ! dial-peer voice 14 voip description To HO destination-pattern 1... session target ipv4:172.17.88.182 ip qos dscp cs5 media ip qos dscp cs3 signaling ! dial-peer voice 15 voip description To HO destination-pattern 2... session target ipv4:172.17.88.182 ip qos dscp cs5 media ip qos dscp cs3 signaling ! dial-peer voice 16 voip description To HO destination-pattern 3... session target ipv4:172.17.88.182 ip qos dscp cs5 media ip qos dscp cs3 signaling ! dial-peer voice 17 voip description To HO destination-pattern 4... session target ipv4:172.17.88.182 ip qos dscp cs5 media ip qos dscp cs3 signaling ! dial-peer voice 10 pots description Rembang destination-pattern 8130 port 0/0/0 ! dial-peer voice 11 pots description Rembang destination-pattern 8131 port 0/0/1 ! dial-peer voice 20 voip description To Baturaja destination-pattern 8120 session target ipv4:172.17.88.178 ip qos dscp cs5 media ip qos dscp cs3 signaling ! dial-peer voice 21 voip description To Baturaja destination-pattern 8121 session target ipv4:172.17.88.178 ip qos dscp cs5 media ip qos dscp cs3 signaling ! ! ! ! gatekeeper shutdown ! ! ! line con 0 login local line aux 0 line vty 0 4 login local transport input all ! scheduler allocate 20000 1000 end