=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2015.08.02 14:53:27 =~=~=~=~=~=~=~=~=~=~=~=
sh run
Building configuration...


Current configuration : 18545 bytes
!
! Last configuration change at 14:44:29 Kabul Sat Aug 1 2015 by pankaj
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname MOE-Jalalabad-RTR
!
boot-start-marker
boot system flash:/c2900-universalk9-mz.SPA.154-3.M.bin
boot system flash:/c2900-universalk9-mz.SPA.154-1.T2.bin
boot-end-marker
!
aqm-register-fnf
!
card type e1 0 0
logging buffered 51200 warnings
enable secret 5 $1$s6Ia$T1WKfgyIg0EotVllnEyy./
!
aaa new-model
!
!
aaa authentication login default group tacacs+ local
aaa authorization exec default group tacacs+ local 
aaa accounting commands 15 default start-stop group tacacs+
!
!
!
!
!
aaa session-id common
clock timezone Kabul 4 30
network-clock-participate wic 0 
!
!
!
!
!
!
!
!
!
!
!
!
!
 --More--         !


!
ip dhcp excluded-address 172.18.3.1
ip dhcp excluded-address 172.18.3.2
ip dhcp excluded-address 172.18.3.3
ip dhcp excluded-address 172.18.3.4
ip dhcp excluded-address 172.18.3.5
ip dhcp excluded-address 172.18.3.6
ip dhcp excluded-address 172.18.3.7
ip dhcp excluded-address 172.18.3.8
ip dhcp excluded-address 172.18.3.129
ip dhcp excluded-address 172.18.3.130
ip dhcp excluded-address 172.18.3.131
ip dhcp excluded-address 172.18.3.132
ip dhcp excluded-address 172.18.3.133
ip dhcp excluded-address 172.18.3.134
ip dhcp excluded-address 172.18.3.135
ip dhcp excluded-address 172.18.3.136
ip dhcp excluded-address 172.18.3.193
ip dhcp excluded-address 172.18.3.194
ip dhcp excluded-address 172.18.3.195
ip dhcp excluded-address 172.18.3.196
ip dhcp excluded-address 172.18.3.197
ip dhcp excluded-address 172.18.3.198
ip dhcp excluded-address 172.18.3.225
ip dhcp excluded-address 172.18.3.226
ip dhcp excluded-address 172.18.3.227
ip dhcp excluded-address 172.18.3.228
ip dhcp excluded-address 172.18.3.229
ip dhcp excluded-address 172.18.3.230
!
ip dhcp pool vlan101
 network 172.18.3.0 255.255.255.192
 default-router 172.18.3.1 
 dns-server 8.8.8.8 
 domain-name moe.af
!
ip dhcp pool vlan103
 network 172.18.3.128 255.255.255.224
 default-router 172.18.3.129 
 dns-server 8.8.8.8 
 domain-name moe.af
 option 150 ip 172.18.3.129 
!
ip dhcp pool vlan105
 network 172.18.3.192 255.255.255.224
 default-router 172.18.3.193 
 dns-server 8.8.8.8 
 --More--          domain-name moe.af
!
ip dhcp pool vlan106
 network 172.18.3.224 255.255.255.224
 default-router 172.18.3.225 
 dns-server 8.8.8.8 
 domain-name moe.af
!
!
!
no ip domain lookup
ip domain name moe.af
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
isdn switch-type primary-net5
!
cts logging verbose
!
crypto pki trustpoint TP-self-signed-1324341089
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1324341089
 revocation-check none
 rsakeypair TP-self-signed-1324341089
!
!
crypto pki certificate chain TP-self-signed-1324341089
 certificate self-signed 01
  3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030 
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 
  69666963 6174652D 31333234 33343130 3839301E 170D3134 31313138 32323331 
  33385A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 33323433 
  34313038 3930819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 
  8100A919 9C6535A8 9A941E10 E369C19B 3FA79DA4 FF9D8251 9B59E07E 68807A8E 
  77B844F9 5EDB8F2C FCE0084B 84D4BE39 EC46F771 0933E019 402ABB7E 811EB4FF 
  8FCB65DD CDFE333D 5738C0E7 515B66A4 1CF3234D 2E856862 1DD5A8D3 871F54F5 
  CFACA083 D2876DD0 248C4ABC C43CD54C B3C3F5F0 CCC385D7 1EC9D004 0AC2565C 
  24DD0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603 
  551D2304 18301680 14D8CE25 59E1B579 4675EE5F C9E366BE 1370DE39 56301D06 
  03551D0E 04160414 D8CE2559 E1B57946 75EE5FC9 E366BE13 70DE3956 300D0609 
  2A864886 F70D0101 05050003 81810055 4D63228D F9628D39 F1886D3B AE050469 
  F70452A0 F04CDF70 3B6055B0 67243CB5 46CD641B 1F3CD64B ED1DB5D7 6A8758D4 
  2DD0C0F5 4FF9CCAB B34FC48C 320916BD 1D3F8AF2 ECFDC0AE 4BE12FC5 FDA1AE21 
 --More--           EACE43F7 7A6EC0B6 575C0F14 2E1E08C2 41288A7C 17C09B80 3E422A51 3B48F31A 
  198739C1 3F759C8A 35F4EF04 F5C88D
  quit
voice-card 0
 dspfarm
 dsp services dspfarm
!
!
voice rtp send-recv
!
voice service voip
 ip address trusted list
  ipv4 172.18.3.129
  ipv4 172.16.5.100
 allow-connections h323 to h323
 allow-connections h323 to sip
 allow-connections sip to h323
 allow-connections sip to sip
 no supplementary-service sip moved-temporarily
 no supplementary-service sip refer
 fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
 h323
 sip
  bind control source-interface GigabitEthernet0/0.103
  bind media source-interface GigabitEthernet0/0.103
  registrar server expires max 600 min 60
!
voice class codec 1
 codec preference 1 g711ulaw
 codec preference 2 g729r8
 codec preference 3 g711alaw
 codec preference 4 g729br8
!
!
!
!
voice register global
 mode  cme
 source-address 172.18.3.129 port 5060
 max-dn 25
 max-pool 25
 load 7841 sip78xx.10-2-1-12SR1-4.loads
 authenticate register
 authenticate realm all
 timezone 36
 date-format D/M/Y
 tftp-path flash:
 file text
 create profile sync 001023237653535A
!
 --More--         voice register dn  3
 number 3001
 allow watch
!
voice register dn  4
 number 5002
 allow watch
!
voice register dn  6
 number 3006
 allow watch
!
voice register pool  3
 busy-trigger-per-button 1
 id mac E0D1.73E4.0908
 type 7841
 number 1 dn 3
 presence call-list
 dtmf-relay rtp-nte
 username moe3 password 123
 codec g711ulaw
 no vad
!
voice register pool  4
 busy-trigger-per-button 1
 id mac E0D1.73E5.8D8A
 type 7841
 number 1 dn 4
 presence call-list
 dtmf-relay rtp-nte
 username moe4 password 3002
 codec g711ulaw
 no vad
!
voice register pool  6
 busy-trigger-per-button 1
 id mac E0D1.73E4.08E5
 type 7841
 number 1 dn 6
 presence call-list
 dtmf-relay rtp-nte
 username moe6 password 123
 codec g711ulaw
 no vad
!
!
!
!
!
!
 --More--         application
 global
  service alternate default
 !
!
license udi pid CISCO2921/K9 sn FCZ18477047
license accept end user agreement
license boot module c2900 technology-package uck9
hw-module pvdm 0/0
!
!
!
file privilege 0
username moe privilege 15 password 7 020B0B5E5A545C
username cisco privilege 15 secret 5 $1$zZIy$QzeHaeK5fBdU6nEBbqZc00
!
redundancy
!
!
!
!
!
controller E1 0/0/0
 framing NO-CRC4 
 clock source internal
 channel-group 0 timeslots 1-31
!
controller E1 0/0/1
!
ip tftp source-interface GigabitEthernet0/0.200
! 
!
crypto isakmp policy 10
 encr 3des
 authentication pre-share
 group 2
crypto isakmp key moe@123# address 172.16.2.2     
!
!
crypto ipsec transform-set TEST esp-3des esp-sha-hmac 
 mode tunnel
!
!
!
crypto map Test 5 ipsec-isakmp 
 ! Incomplete
 set peer 172.16.2.2
 set security-association lifetime seconds 86400
 set transform-set TEST 
 match address 101
 --More--         !
!
!
!
!
interface Loopback0
 description " Router ID"
 ip address 172.18.100.3 255.255.255.255
!
interface Embedded-Service-Engine0/0
 no ip address
 shutdown
!
interface GigabitEthernet0/0
 description " Conneted To MOE-Jalalabad-CS01 Gi0/1 "
 no ip address
 duplex auto
 speed auto
!
interface GigabitEthernet0/0.101
 description "DATA-Vlan"
 encapsulation dot1Q 101
 ip address 172.18.3.1 255.255.255.192
!
interface GigabitEthernet0/0.103
 description "Voice-Vlan"
 encapsulation dot1Q 103
 ip address 172.18.3.129 255.255.255.224
 h323-gateway voip interface
 h323-gateway voip bind srcaddr 172.18.3.129
!
interface GigabitEthernet0/0.104
 description "Server-VLAN"
 encapsulation dot1Q 104
 ip address 172.18.3.161 255.255.255.224
!
interface GigabitEthernet0/0.105
 description "Wireless Data Vlan "
 encapsulation dot1Q 105
 ip address 172.18.3.193 255.255.255.224
!
interface GigabitEthernet0/0.106
 description "Wireless Guest Vlan "
 encapsulation dot1Q 106
 ip address 172.18.3.225 255.255.255.224
!
interface GigabitEthernet0/0.200
 description " For MGMT "
 encapsulation dot1Q 200
 ip address 172.18.200.33 255.255.255.240
 --More--         !
interface GigabitEthernet0/1
 description " WAN Interface "
 no ip address
 no ip route-cache
 duplex auto
 speed auto
!
interface GigabitEthernet0/1.402
 description " Connected to MOE-HQ-Core01 "
 encapsulation dot1Q 402
 ip address 172.18.0.10 255.255.255.252
 no ip route-cache
 ip ospf message-digest-key 1 md5 7 07022E496E584B5654
 ip ospf network point-to-point
 ip ospf dead-interval 9
 ip ospf hello-interval 3
 crypto map Test
!
interface GigabitEthernet0/2
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface Serial0/0/0:0
 no ip address
!
!
router ospf 100
 router-id 172.18.100.3
 area 10 authentication message-digest
 area 10 stub no-summary
 passive-interface default
 no passive-interface GigabitEthernet0/1
 no passive-interface GigabitEthernet0/1.402
 network 172.18.0.8 0.0.0.3 area 10
 network 172.18.3.0 0.0.0.63 area 10
 network 172.18.3.128 0.0.0.31 area 10
 network 172.18.3.160 0.0.0.31 area 10
 network 172.18.3.192 0.0.0.31 area 10
 network 172.18.3.224 0.0.0.31 area 10
 network 172.18.100.3 0.0.0.0 area 10
 network 172.18.200.32 0.0.0.15 area 10
!
ip forward-protocol nd
!
ip http server
ip http authentication local
no ip http secure-server
 --More--         ip http timeout-policy idle 60 life 86400 requests 10000
ip http path flash:GUI
!
ip tacacs source-interface GigabitEthernet0/0.200
!
!
!
snmp-server community AFG_Province@123 RW
snmp-server location MOE-HQ, KABUL, AFG
snmp-server contact abc@moe.com
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps vrrp
snmp-server enable traps flowmon
snmp-server enable traps transceiver all
snmp-server enable traps ds1
snmp-server enable traps call-home message-send-fail server-fail
snmp-server enable traps tty
snmp-server enable traps eigrp
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps ospf retransmit
snmp-server enable traps ospf lsa
snmp-server enable traps ospf cisco-specific state-change nssa-trans-change
snmp-server enable traps ospf cisco-specific state-change shamlink interface
snmp-server enable traps ospf cisco-specific state-change shamlink neighbor
snmp-server enable traps ospf cisco-specific errors
snmp-server enable traps ospf cisco-specific retransmit
snmp-server enable traps ospf cisco-specific lsa
snmp-server enable traps gatekeeper
snmp-server enable traps xgcp
snmp-server enable traps license
snmp-server enable traps envmon
snmp-server enable traps c3g
snmp-server enable traps ds3
snmp-server enable traps adslline
snmp-server enable traps vdsl2line
snmp-server enable traps icsudsu
snmp-server enable traps isdn call-information
snmp-server enable traps isdn layer2
snmp-server enable traps isdn chan-not-avail
snmp-server enable traps isdn ietf
snmp-server enable traps ds0-busyout
snmp-server enable traps ds1-loopback
snmp-server enable traps energywise
snmp-server enable traps vstack
snmp-server enable traps mac-notification
snmp-server enable traps trustsec-sxp conn-srcaddr-err msg-parse-err conn-config-err binding-err conn-up conn-down binding-expn-fail oper-nodeid-change binding-conflict
snmp-server enable traps bgp cbgp2
 --More--         snmp-server enable traps isis
snmp-server enable traps ospfv3 state-change
snmp-server enable traps ospfv3 errors
snmp-server enable traps aaa_server
snmp-server enable traps atm subif
snmp-server enable traps cef resource-failure peer-state-change peer-fib-state-change inconsistency
snmp-server enable traps memory bufferpeak
snmp-server enable traps cnpd
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps config-ctid
snmp-server enable traps entity
snmp-server enable traps fru-ctrl
snmp-server enable traps resource-policy
snmp-server enable traps event-manager
snmp-server enable traps frame-relay multilink bundle-mismatch
snmp-server enable traps frame-relay
snmp-server enable traps frame-relay subif
snmp-server enable traps hsrp
snmp-server enable traps ipmulticast
snmp-server enable traps msdp
snmp-server enable traps mvpn
snmp-server enable traps nhrp nhs
snmp-server enable traps nhrp nhc
snmp-server enable traps nhrp nhp
snmp-server enable traps nhrp quota-exceeded
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-message
snmp-server enable traps pppoe
snmp-server enable traps cpu threshold
snmp-server enable traps rsvp
snmp-server enable traps syslog
snmp-server enable traps l2tun session
snmp-server enable traps l2tun pseudowire status
snmp-server enable traps vtp
snmp-server enable traps waas 
snmp-server enable traps ethernet cfm cc mep-up mep-down cross-connect loop config
snmp-server enable traps ethernet cfm crosscheck mep-missing mep-unknown service-up
snmp-server enable traps bstun
snmp-server enable traps dlsw
snmp-server enable traps ipsla
snmp-server enable traps stun
snmp-server enable traps bfd
snmp-server enable traps mpls traffic-eng
snmp-server enable traps mpls fast-reroute protected
snmp-server enable traps mpls rfc ldp
snmp-server enable traps mpls ldp
 --More--         snmp-server enable traps pw vc
snmp-server enable traps ipmobile
snmp-server enable traps snasw alert isr topology cp-cp port link dlus
snmp-server enable traps dial
snmp-server enable traps dsp card-status
snmp-server enable traps dsp oper-state
snmp-server enable traps dsp video-usage
snmp-server enable traps dsp video-out-of-resource
snmp-server enable traps gdoi gm-start-registration
snmp-server enable traps gdoi gm-registration-complete
snmp-server enable traps gdoi gm-re-register
snmp-server enable traps gdoi gm-rekey-rcvd
snmp-server enable traps gdoi gm-rekey-fail
snmp-server enable traps gdoi ks-rekey-pushed
snmp-server enable traps gdoi gm-incomplete-cfg
snmp-server enable traps gdoi ks-no-rsa-keys
snmp-server enable traps gdoi ks-new-registration
snmp-server enable traps gdoi ks-reg-complete
snmp-server enable traps firewall serverstatus
snmp-server enable traps ike policy add
snmp-server enable traps ike policy delete
snmp-server enable traps ike tunnel start
snmp-server enable traps ike tunnel stop
snmp-server enable traps ipsec cryptomap add
snmp-server enable traps ipsec cryptomap delete
snmp-server enable traps ipsec cryptomap attach
snmp-server enable traps ipsec cryptomap detach
snmp-server enable traps ipsec tunnel start
snmp-server enable traps ipsec tunnel stop
snmp-server enable traps ipsec too-many-sas
snmp-server enable traps rf
snmp-server enable traps bulkstat collection transfer
snmp-server enable traps vrfmib vrf-up vrf-down vnet-trunk-up vnet-trunk-down
snmp-server enable traps ethernet cfm alarm
snmp-server enable traps mpls vpn
snmp-server enable traps ccme
snmp-server enable traps srst
snmp-server enable traps voice
snmp-server enable traps dnis
snmp-server host 172.16.200.254 version 2c AFG_Province@123 
tftp-server sboot78xx.10-2-1-12SR1-4.sbn
tftp-server rootfs78xx.10-2-1-12SR1-4.sbn
tftp-server kern78xx.10-2-1-12SR1-4.sbn
tftp-server sip78xx.10-2-1-12SR1-4.loads
tacacs-server host 172.16.200.30 key 7 1043061C254640584F
tacacs-server directed-request
!
!
!
control-plane
 --More--         !
!
voice-port 0/1/0
!
voice-port 0/1/1
!
voice-port 0/1/2
!
voice-port 0/1/3
 !
 !
 !
 !
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
sccp local Loopback0
sccp ccm 172.18.100.3 identifier 1 priority 1 version 7.0 
sccp
!
sccp ccm group 1
 associate ccm 1 priority 1
 associate profile 1 register CME-TRANSC
!
!
!
dspfarm profile 1 transcode universal  
 codec g729abr8
 codec g729ar8
 codec g711alaw
 codec g711ulaw
 maximum sessions 5
 associate application SCCP
 shutdown
!
dial-peer cor custom
 name local
 name international
 name domestic
 name internal
 name moehq
!
!
dial-peer cor list localcalls
 member local
 --More--          member internal
 member moehq
!
dial-peer cor list Internationalcalls
 member local
 member international
 member domestic
 member internal
 member moehq
!
dial-peer cor list domesticcalls
 member local
 member domestic
 member internal
 member moehq
!
dial-peer cor list internalcalls
 member internal
 member moehq
!
!
dial-peer voice 2 voip
 corlist outgoing localcalls
 description "Natoinal Mobile "
 preference 2
 destination-pattern 007........
 session target ipv4:172.16.5.100
 codec g711ulaw
!
dial-peer voice 20 voip
 description "Moe HQ Dial-peer"
 preference 6
 destination-pattern 8...
 session protocol sipv2
 session target ipv4:172.16.5.100
 session transport udp
 incoming called-number .
 voice-class codec 1  
 dtmf-relay rtp-nte
 no vad
!
!
gateway 
 timer receive-rtp 1200
!
!
!
gatekeeper
 shutdown
!
 --More--         !
telephony-service
 protocol mode ipv4
 sdspfarm units 5
 sdspfarm transcode sessions 4
 sdspfarm tag 1 CME-TRANSC
 max-ephones 25
 max-dn 25
 ip source-address 172.18.3.129 port 2000
 service phone pcport 1
 cnf-file location flash:
 cnf-file perphone
 load 7941 sip78xx.10-2-1-12SR1-4.loads
 time-zone 36
 date-format dd-mm-yy
 max-conferences 8 gain -6
 web admin system name Admin secret 5 $1$klhC$nTR2F/Mo57KpMttTlQ76u1
 dn-webedit 
 time-webedit 
 transfer-system full-consult
 create cnf-files version-stamp Jan 01 2002 00:00:00
!
!
ephone-dn  2
 number 5000
!
!
ephone  2
 device-security-mode none
 mac-address E0D1.730A.3278
 mtp
 type 7942
 button  1:2
!
!
!
banner exec ^CC
***********************************************************************
******************** MINISTRY OF EDUCATION ****************************
*       UNAUTHORIZED ACCESS TO THIS NETWORK DEVICE IS PROHIBITED.
*
^C
banner login ^CC
***********************************************************************
******************** MINISTRY OF EDUCATION ****************************
*       UNAUTHORIZED ACCESS TO THIS NETWORK DEVICE IS PROHIBITED.
*
* YOU MUST HAVE EXPLICIT PERMISSION TO ACCESS OR CONFIGURE THIS DEVICE.
* ALL ACTIVITIES PERFORMED ON THIS DEVICE ARE LOGGED AND VIOLATION OF
* THIS POLICY MAY RESULT IN DISCIPLINARY ACTION AND MAY BE REPORTED TO
 --More--         * LAW ENFORCEMENT OFFICIAL.THERE IS NO RIGHT OF PRIVACY FOR ANY PERSON
* ACCESSING OR USING THIS SYSTEM.
*
***********************************************************************
^C
!
line con 0
line aux 0
line 2
 no activation-character
 no exec
 transport preferred none
 transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
 stopbits 1
line vty 0 4
 privilege level 15
 password 7 011E09017B5A545C62
 transport input telnet ssh
line vty 5 15
 privilege level 15
 password 7 151F0409247B79776B
 transport input none
!
scheduler allocate 20000 1000
ntp server 172.16.100.1
!
end

MOE-Jalalabad-RTR#