enable secret 5 $1$fykX$qm0V/256jS2LhgeRJ18Ov1 ! no aaa new-model clock timezone CET 1 0 clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 3:00 ! ! crypto pki trustpoint telekom enrollment terminal serial-number revocation-check none ! crypto pki certificate chain telekom certificate ca 01 308203C3 308202AB A0030201 02020101 300D0609 2A864886 F70D0101 0B050030 8182310B 30090603 55040613 02444531 2B302906 0355040A 0C22542D 53797374 656D7320 456E7465 72707269 73652053 65727669 63657320 476D6248 311F301D 06035504 0B0C1654 2D537973 74656D73 20547275 73742043 656E7465 72312530 23060355 04030C1C 542D5465 6C655365 6320476C 6F62616C 526F6F74 20436C61 73732032 301E170D 30383130 30313130 34303134 5A170D33 33313030 31323335 3935395A 30818231 0B300906 03550406 13024445 312B3029 06035504 0A0C2254 2D537973 74656D73 20456E74 65727072 69736520 53657276 69636573 20476D62 48311F30 1D060355 040B0C16 542D5379 7374656D 73205472 75737420 43656E74 65723125 30230603 5504030C 1C542D54 656C6553 65632047 6C6F6261 6C526F6F 7420436C 61737320 32308201 22300D06 092A8648 86F70D01 01010500 0382010F 00308201 0A028201 0100AA5F DA1B5FE8 7391E5DA 5CF4A2E6 47E5F368 5560051D 02A4B39B 59F31E8A AF34ADFC 0DC2D948 19EE698F C920FC21 AA0719ED B05CAC65 C75FED02 7C7B7C2D 1BD6BAB9 80C21882 1684FA66 B008C654 2381E4CD B9493FF6 4F6E3748 28380FC5 BEE76870 FD39974D D2C79891 50AAC444 B3237D39 47E95262 D612935E B7319642 05FB76A7 1EA3F5C2 FCE97AC5 6CA9714F EACB78BC 60AFC7DE F4D9CBBE 7E33A56E 9483F034 FA21ABEA 8E72A03F A4DE305B EF864D6A 955B4344 A810151C E50157C5 98F1E606 2891AA20 C5B75326 5143B20B 119558E1 C00F76D9 C08D7C81 F372709E 6FFE1A8E D95F35C6 B26F347C BE484FE2 5A39D7D8 9D789E9F 863E035E 198B44A2 D5C70203 010001A3 42304030 0F060355 1D130101 FF040530 030101FF 300E0603 551D0F01 01FF0404 03020106 301D0603 551D0E04 160414BF 59203600 79A0A022 6B8CD5F2 61D2B82C CB824A30 0D06092A 864886F7 0D01010B 05000382 01010031 03A2610B 1F74E872 36C66DF9 4D9EFA22 A8E18156 CFCDBB9F EAAB9119 38AFAA7C 154DF3B6 A38DA5F4 8EF644A9 A7E82195 AD3E0062 1688F002 BAFC6123 E6339B30 7A6B3662 7BAD0423 845865E2 DB2B8AE7 25533762 535FBCDA 016229A2 A62771E6 3A227EC1 6F1D9570 204A0734 DFEAFF15 80E5BAD7 7AD85B75 7C057A29 477E40A8 311377CD 403BB451 477A2E11 E34711DE 9D66D08B D55466FA 8355EA7C C229891B E96FB3CE E20584C9 2F3E7885 626EC95F C1786374 58C04818 0C9939EB A4CC1AB5 795A8D15 9CD8140D F67A0757 C7228305 2D3C9B25 263D18B3 A9437CC8 C8AB648F 0EA3BF9C 1B9D30DB DAD0192E AA3CF1FB 338076E4 CDAD194F 05278E13 A16EC2 quit ! voice-card 0 dspfarm dsp services dspfarm ! voice service voip ip address trusted list ipv4 217.0.0.0 255.255.0.0 address-hiding mode border-element license capacity 50 allow-connections sip to sip no supplementary-service sip moved-temporarily no supplementary-service sip refer supplementary-service media-renegotiate redirect ip2ip fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback pass-through g711alaw sip registrar server expires max 600 min 60 ! ! ! voice class uri 201 sip host dns:sip-trunk.telekom.de ! ! voice class codec 3 codec preference 1 g722-64 codec preference 2 g711alaw ! ! voice class sip-profiles 3001 rule 1 request REGISTER sip-header SIP-Req-URI modify "sips:(.*)" "sip:\1" rule 2 request REGISTER sip-header To modify "" "" rule 6 request REGISTER sip-header Proxy-Require add "Proxy-Require: gin" rule 7 request REGISTER sip-header Require add "Require: gin" ! ! voice class sip-profiles 401 rule 1 request ANY sip-header P-Asserted-Identity modify "" "" rule 2 request ANY sip-header SIP-Req-URI modify "sips:(.*)" "sip:\1" rule 3 request ANY sip-header To modify "" "" rule 6 response ANY sip-header To modify "" "" rule 9 request ANY sip-header Min-SE remove rule 10 request ANY sip-header Diversion remove rule 11 request ANY sdp-header Connection-Info remove rule 12 response ANY sdp-header Connection-Info remove rule 13 request INVITE sip-header Allow-Header modify "INFO," "" ! ! voice class e164-pattern-map 201 e164 11[68]T e164 11[025] e164 +T e164 0T ! ! voice class tenant 50 registrar dns:sip-trunk.telekom.de:5061 scheme sips expires 240 tcp tls auth-realm sip-trunk.telekom.de credentials number +4947XXXXXXXX username 5511XXXXXXXX password 7 040XXXXXXXXXXXXX realm sip-trunk.telekom.de authentication username 551XXXXXXXXX password 7 014A1XXXXXXXXXX realm sip-trunk.telekom.de no remote-party-id timers expires 60000 timers register 100 timers buffer-invite 1000 timers dns registrar-cache ttl sip-server dns:sip-trunk.telekom.de:5061 connection-reuse asserted-id pai bind control source-interface GigabitEthernet0/0.2 bind media source-interface GigabitEthernet0/0.2 no pass-thru content custom-sdp conn-reuse sip-profiles 3001 outbound-proxy dns:reg.sip-trunk.telekom.de privacy-policy passthru call-route p-called-party-id midcall-signaling preserve-codec ! ! interface GigabitEthernet0/0.2 description ROUTER INTERFACE FOR VOICE VLAN encapsulation dot1Q 2 ip address 192.168.100.10 255.255.255.0 ip helper-address 192.168.200.10 ip nat inside ip virtual-reassembly in ! ! no ip nat service sip tcp port 5060 no ip nat service sip udp port 5060 ip nat pool pool1 192.168.100.0 192.168.100.255 netmask 255.255.255.0 ip route 0.0.0.0 0.0.0.0 192.168.200.1 ! dspfarm profile 2 transcode universal security codec g729abr8 codec g729ar8 codec g711alaw codec g711ulaw codec g722-64 maximum sessions 10 associate application CUBE ! dial-peer voice 21 voip description **SIP-TRUNK TLS** session protocol sipv2 session target sip-server session transport tcp tls destination e164-pattern-map 201 incoming uri from 201 voice-class codec 3 voice-class sip srtp-auth sha1-32 sha1-80 voice-class sip url sips voice-class sip asserted-id pai voice-class sip outbound-proxy dns:reg.sip-trunk.telekom.de voice-class sip profiles 401 voice-class sip tenant 50 dtmf-relay rtp-nte srtp fax-relay ecm disable fax rate 14400 clid strip name no vad ! ! sip-ua transport tcp tls v1.2 crypto signaling remote-addr 217.0.0.0 255.255.0.0 trustpoint telekom !