ABI-Vietnam-INT-C2921#show run
ABI-Vietnam-INT-C2921#show running-config 
Building configuration...


Current configuration : 15746 bytes
!
! Last configuration change at 14:23:31 Vietnam Thu Jan 8 2015 by admin
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname NT-C2921
!
boot-start-marker
boot-end-marker
!
!
card type e1 0 2
enable password 7 14161606050A0A79747967
!
no aaa new-model
clock timezone Vietnam 7 0
network-clock-participate wic 2 
network-clock-select 1 E1 0/2/0
!
ip cef
!
!
!
ip dhcp excluded-address 192.168.1.1 192.168.1.20
!
ip dhcp pool ABI
 import all
 network 192.168.1.0 255.255.255.0
 default-router 192.168.1.1 
 dns-server x.x.131.8 x.x.188.2 
 option 150 ip 192.168.1.1 
!
!
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
isdn switch-type primary-net5
!
!
!
voice-card 0
!
!
!
voice class dualtone-detect-params 90
 freq-max-power 0
 freq-min-power 35
 freq-power-twist 15
 freq-max-delay 40
 cadence-variation 8
!
voice class custom-cptone AT
 dualtone disconnect
  frequency 380 430
  cadence 330 330
!
!
!
!         
!
!
license udi pid CISCO2921/K9 sn FGL17491256
hw-module pvdm 0/0
!
hw-module sm 1
!
!
!
username admin1 privilege 0 password 7 1304131F020255
username admin password 7 040A59555B741A4F29
!
redundancy
!
!
!
!
!
controller E1 0/2/0
 framing NO-CRC4 
 pri-group timeslots 1-16
!
! 
!
crypto isakmp policy 5
 encr aes 192
 hash md5
 authentication pre-share
 group 5
 lifetime 28800
crypto isakmp key 1234567890a@ address 180.148.7.70   
!
!
crypto ipsec transform-set ASA-IPSEC esp-des esp-sha-hmac 
 mode tunnel
!
!
!
crypto ipsec client ezvpn remote
 connect auto
 group BarcodeDCComGroup key barc0de
 mode client
 peer x.x.x.x
 username vietnamoffice password Aqz13421
 xauth userid mode local
!
!
crypto map mymap 5 ipsec-isakmp 
 set peer x.x.7.70
 set transform-set ASA-IPSEC 
 match address 100
!
!
!
!
!
interface Embedded-Service-Engine0/0
 no ip address
 shutdown
!
interface GigabitEthernet0/0
 no ip address
 shutdown
 duplex auto
 speed 100
 pppoe enable group global
 pppoe-client dial-pool-number 1
!         
interface GigabitEthernet0/1
 ip address x.x.96.110 255.255.255.252
 ip mtu 1492
 ip nat outside
 ip virtual-reassembly in
 ip tcp adjust-mss 1452
 duplex auto
 speed auto
 crypto map mymap
!
interface GigabitEthernet0/2
 no ip address
 shutdown
 duplex auto
 speed auto
!
interface Serial0/2/0:15
 no ip address
 encapsulation hdlc
 isdn switch-type primary-net5
 isdn overlap-receiving
 isdn incoming-voice voice
 no cdp enable
!
interface GigabitEthernet1/0
 no ip address
 shutdown
!
interface GigabitEthernet1/1
 description Internal switch interface connected to Service Module
 no ip address
!
interface Vlan1
 description to core switch
 ip address 192.168.1.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
 crypto ipsec client ezvpn remote inside
!
interface Dialer1
 ip ddns update no-ip
 ip address negotiated
 ip mtu 1492
 ip nat outside
 ip virtual-reassembly in
 encapsulation ppp
 ip tcp adjust-mss 1452
 shutdown
 dialer pool 1
 dialer-group 1
 ppp authentication pap chap callin
 ppp chap hostname t008_ftth_namcttbaiv
 ppp chap password 7 0708724E6D0838
 ppp pap sent-username t008_ftth_namcttbaiv password 7 0201575928072E
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat inside source route-map nonat interface GigabitEthernet0/1 overload
ip nat inside source static tcp 192.168.1.15 20 x.x.96.110 20 extendable
ip nat inside source static tcp 192.168.1.15 21 x.x.96.110 21 extendable
ip nat inside source static tcp 192.168.1.20 1720 x.x.96.110 1720 extendable
ip route 0.0.0.0 0.0.0.0 x.x.96.109
ip route 0.0.0.0 0.0.0.0 Dialer1 10
!
access-list 10 permit 192.168.1.0 0.0.0.255
access-list 100 remark Site2siteVPN Rule
access-list 100 permit ip 192.168.1.0 0.0.0.255 172.29.168.0 0.0.0.255
access-list 100 permit ip 192.168.1.0 0.0.0.255 172.29.169.0 0.0.0.255
access-list 100 permit ip 192.168.1.0 0.0.0.255 172.29.173.0 0.0.0.127
access-list 100 permit ip 192.168.1.0 0.0.0.255 172.29.172.0 0.0.0.255
access-list 100 permit ip 192.168.1.0 0.0.0.255 192.168.110.0 0.0.0.255
access-list 110 deny   ip 192.168.1.0 0.0.0.255 172.29.168.0 0.0.0.255
access-list 110 deny   ip 192.168.1.0 0.0.0.255 172.29.169.0 0.0.0.255
access-list 110 deny   ip 192.168.1.0 0.0.0.255 172.29.172.0 0.0.0.255
access-list 110 deny   ip 192.168.1.0 0.0.0.255 192.168.110.0 0.0.0.255
access-list 110 deny   ip 192.168.1.0 0.0.0.255 172.29.173.0 0.0.0.127
access-list 110 permit ip 192.168.1.0 0.0.0.255 any
!
route-map nonat permit 10
 match ip address 110
!
!
tftp-server flash:apps42.9-3-1ES19.sbn
tftp-server flash:cnu42.9-3-1ES19.sbn
tftp-server flash:cvm42sccp.9-3-1ES19.sbn
tftp-server flash:dsp42.9-3-1ES19.sbn
tftp-server flash:jar42sccp.9-3-1ES19.sbn
tftp-server flash:SCCP42.9-3-1SR3-1S.loads
tftp-server flash:term42.default.loads
tftp-server flash:term62.default.loads
tftp-server flash:apps37sccp.1-4-5-7.bin
tftp-server flash:cmterm-7937-1-4-5-QED.cop.sgn
tftp-server flash:cmterm-7937-1-4-5-7-SCCP.cop.sgn
!
control-plane
!
!
voice-port 0/0/0
 supervisory disconnect dualtone mid-call
 supervisory custom-cptone AT
 echo-cancel coverage 32
 cptone AU
 timeouts call-disconnect 1
 timeouts ringing 30
 timeouts wait-release 1
 connection plar opx 1005
 impedance complex1
 description ###Connect to PSTN-0862959372###
 caller-id enable
!
voice-port 0/0/1
 supervisory disconnect dualtone mid-call
 supervisory custom-cptone AT
 echo-cancel coverage 32
 cptone AU
 timeouts call-disconnect 1
 timeouts ringing 30
 timeouts wait-release 1
 timing hookflash-out 50
 connection plar opx 1005
 impedance complex1
 description ###Connect to PSTN-0862959372###
 caller-id enable
!
voice-port 0/0/2
 supervisory disconnect dualtone mid-call
 supervisory custom-cptone AT
 echo-cancel coverage 32
 timeouts call-disconnect 1
 timeouts wait-release 1
 timing hookflash-out 50
 connection plar 1005
 impedance complex1
 description ###Connect to PSTN###
 caller-id enable
!
voice-port 0/0/3
 supervisory disconnect dualtone mid-call
 supervisory custom-cptone AT
 echo-cancel coverage 32
 timeouts call-disconnect 1
 timeouts wait-release 1
 timing hookflash-out 50
 connection plar 1005
 impedance complex1
 description ###Connect to PSTN###
 caller-id enable
!
voice-port 0/2/0:15
 echo-cancel coverage 32
 timeouts call-disconnect 1
 timeouts wait-release 1
 connection plar 1005
 description ###Connect to PSTN###
!
voice-port 0/1/0
 supervisory disconnect dualtone mid-call
 supervisory custom-cptone AT
 echo-cancel coverage 32
 timeouts call-disconnect 1
 timeouts wait-release 1
 timing hookflash-out 50
 connection plar 1005
 impedance complex1
 description ###Connect to PSTN###
 caller-id enable
!
voice-port 0/1/1
 supervisory disconnect dualtone mid-call
 supervisory custom-cptone AT
 echo-cancel coverage 32
 timeouts call-disconnect 1
 timeouts wait-release 1
 timing hookflash-out 50
 connection plar 1005
 impedance complex1
 description ###Connect to PSTN###
 caller-id enable
!
voice-port 0/1/2
 supervisory disconnect dualtone mid-call
 supervisory custom-cptone AT
 echo-cancel coverage 32
 timeouts call-disconnect 1
 timeouts wait-release 1
 timing hookflash-out 50
 connection plar 1005
 impedance complex1
 description ###Connect to PSTN###
 caller-id enable
!
voice-port 0/1/3
 echo-cancel coverage 32
 !
 !
 !
!
!
!
mgcp profile default
!         
!
dial-peer voice 1 pots
 destination-pattern 9.T
 incoming called-number .
 port 0/0/0
!
dial-peer voice 2 pots
 destination-pattern 9.T
 incoming called-number .
 port 0/0/1
!
dial-peer voice 3 pots
 destination-pattern 9.T
 incoming called-number .
 port 0/0/2
!
dial-peer voice 4 pots
 destination-pattern 9.T
 incoming called-number .
 port 0/0/3
!
dial-peer voice 5 pots
 service aa
 destination-pattern 9.T
 incoming called-number .
 port 0/1/0
!
dial-peer voice 6 pots
 service aa
 destination-pattern 9.T
 incoming called-number .
 port 0/1/1
!
dial-peer voice 7 pots
!
dial-peer voice 10 pots
 destination-pattern 9.T
 direct-inward-dial
 port 0/2/0:15
!
dial-peer voice 11 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 12 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 13 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 14 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 15 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 16 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 17 pots
 destination-pattern 9.T
 direct-inward-dial
!         
dial-peer voice 18 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 19 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 20 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 21 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 22 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 23 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 24 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 25 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 26 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 27 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 28 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 29 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 30 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 31 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 32 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 33 pots
 destination-pattern 9.T
 direct-inward-dial
!
dial-peer voice 34 pots
 destination-pattern 9.T
 direct-inward-dial
!         
!
!
!
gatekeeper
 shutdown
!
!
telephony-service
 max-ephones 50
 max-dn 144
 ip source-address 192.168.1.1 port 2000
 auto assign 20 to 24 type 7942
 auto assign 25 to 30 type 7937
 system message ABI VoIP Systems
 load 7937 apps37sccp.1-4-5-7
 load 7960-7940 SCCP42.9-3-1SR3-1S
 load 7942 SCCP42.9-3-1SR3-1S
 time-zone 45
 time-format 24
 date-format dd-mm-yy
 keepalive 15
 max-conferences 8 gain -6
 transfer-system full-consult
!
!
ephone-dn  1
 number 1001
 pickup-group 2000
 name Ricardo
!
!
ephone-dn  2
 number 1002
 pickup-group 2000
 name Truong The Loc
!
!
ephone-dn  3
 number 1003
 pickup-group 2000
 name Micheal
!
!
ephone-dn  4
 number 1004
 pickup-group 2000
 name Dieu Anh
!
!
ephone-dn  5
 number 1005
 pickup-group 2000
 name Linh Ngo
!
!
ephone-dn  6
 number 1006
 pickup-group 2000
 name Huynh Van Phuong
!
!
ephone-dn  7
 number 1007
 pickup-group 2000
 name My Bui
!
!
ephone-dn  8
 number 1008
 pickup-group 2000
 name Long
!
!
ephone-dn  9
 number 1009
 pickup-group 2000
 name Minh Tran
!
!
ephone-dn  10
 number 1010
 pickup-group 2000
 name Jessica Nguyen
!
!
ephone-dn  11
 number 1011
 pickup-group 2000
!
!
ephone-dn  12
 number 1012
 pickup-group 2000
 name Do Dinh Minh
!
!
ephone-dn  13
 number 1013
 pickup-group 2000
 name Trang Le
!
!
ephone-dn  14
 number 1014
 pickup-group 2000
 name Truong An
!
!
ephone-dn  15
 number 1015
 pickup-group 2000
 name Nguyen Quang Hai
!
!
ephone-dn  16
 number 1016
 pickup-group 2000
 name Nhat Minh
!
!
ephone-dn  17
 number 1017
 pickup-group 2000
 name Vi Duong
!
!
ephone-dn  18
 number 1018
 pickup-group 2000
 name Hanh Mai
!
!
ephone-dn  19
 number 1019
 pickup-group 2000
!         
!
ephone-dn  20
 number 1020
 pickup-group 2000
 name Phuong Le
!
!
ephone-dn  21
 number 1021
 pickup-group 2000
 name Linh Phuong
!
!
ephone-dn  22
 number 1022
 pickup-group 2000
!
!
ephone-dn  23
 number 1023
 pickup-group 2000
!
!
ephone-dn  24
 number 1024
 pickup-group 2000
!
!
ephone-dn  25
 number 1025
!
!
ephone-dn  26
 number 1026
!
!
ephone-dn  27
 number 1027
!
!
ephone-dn  30
 number 1030
!
!
ephone-dn  31  dual-line
 number 1031
!
!
ephone-dn  32  dual-line
 number 1032
!
!
ephone-dn  33  dual-line
 number 1033
!
!
ephone-dn  34  dual-line
 number 1034
!
!
ephone-dn  35  dual-line
 number 1035
!
!
ephone-dn  36  dual-line
 number 1036
!
!         
ephone-dn  37  dual-line
 number 1037
!
!
ephone-dn  38  dual-line
 number 1038
!
!
ephone-dn  39  dual-line
 number 1031
!
!
ephone-dn  40  dual-line
 number 1040
!
!
ephone-dn  41  dual-line
 number 1041
!
!
ephone-dn  42  dual-line
 number 1042
!
!
ephone-dn  43  dual-line
 number 1043
!
!
ephone-dn  44  dual-line
 number 1044
!
!
ephone-dn  45  dual-line
 number 1045
!
!
ephone-dn  46  dual-line
 number 1046
!
!
ephone-dn  47  dual-line
 number 1047
!
!
ephone-dn  48  dual-line
 number 1048
!
!
ephone  1
 device-security-mode none
 mac-address 0004.F2F7.A7F5
 type 7937
 button  1:1
!
!
!
ephone  2
 device-security-mode none
 mac-address 0004.F2F7.A80C
 type 7937
 button  1:2
!
!
!
ephone  3
 device-security-mode none
 mac-address 5CA4.8A65.F2E4
 type 7942
 button  1:3
!
!
!
ephone  4
 device-security-mode none
 mac-address 5CA4.8A65.9A0E
 type 7942
 button  1:4
!
!
!
ephone  5
 device-security-mode none
 mac-address 5CA4.8A64.4BC8
 type 7942
 button  1:5
!
!
!
ephone  6
 device-security-mode none
 mac-address 5CA4.8A64.4D24
 type 7942
 button  1:6
!
!
!
ephone  7
 device-security-mode none
 mac-address 5CA4.8A64.4B70
 type 7942
 button  1:7
!
!
!
ephone  8
 device-security-mode none
 mac-address C07B.BCA0.9E72
 type 7942
 button  1:14
!
!
!
ephone  9
 device-security-mode none
 mac-address 5CA4.8A64.B4CC
 type 7942
 button  1:9
!
!
!
ephone  10
 device-security-mode none
 mac-address 5CA4.8A65.9B5D
 type 7942
 button  1:10
!
!
!
ephone  11
 device-security-mode none
 mac-address 5CA4.8A65.9742
 type 7942
 button  1:11
!
!
!         
ephone  12
 device-security-mode none
 mac-address 5CA4.8A65.F2E6
 type 7942
 button  1:12
!
!
!
ephone  13
 device-security-mode none
 mac-address 5CA4.8A64.356D
 type 7942
 button  1:13
!
!
!
ephone  14
 device-security-mode none
 mac-address 5CA4.8A64.4C25
 type 7942
 button  1:8
!
!
!
ephone  15
 device-security-mode none
 mac-address 5CA4.8A65.974A
 type 7942
 button  1:15
!
!
!
ephone  16
 device-security-mode none
 mac-address 5CA4.8A64.4BD5
 type 7942
 button  1:16
!
!
!
ephone  17
 device-security-mode none
 mac-address 5CA4.8A65.9761
 type 7942
 button  1:17
!
!
!
ephone  18
 device-security-mode none
 mac-address 5CA4.8A64.4BC7
 type 7942
 button  1:18
!
!
!
ephone  19
 device-security-mode none
 mac-address 5CA4.8A65.0B32
 type 7942
 button  1:19
!
!
!
ephone  20
 device-security-mode none
 mac-address 5CA4.8A65.981E
 type 7942
 button  1:20
!
!
!
ephone  21
 device-security-mode none
 mac-address 5CA4.8A64.4BBE
 type 7942
 button  1:21
!
!
!
ephone  22
 device-security-mode none
 mac-address 5CA4.8A65.9808
 type 7937
 button  1:37 2:38 3:39 4:40
 button  5:41 6:42
!
!
!
ephone  23
 device-security-mode none
 mac-address 5CA4.8A64.4C22
 type 7937
 button  1:31 2:32 3:33 4:34
 button  5:35 6:36
!
!
!
ephone  24
 device-security-mode none
 mac-address 5CA4.8A65.9B21
 type 7937
 button  1:43 2:44 3:45 4:46
 button  5:47 6:42
!
!
!
ephone  25
 device-security-mode none
 mac-address 5CA4.8A64.4BD7
 type 7942
 button  1:22
!
!
!
ephone  26
 device-security-mode none
 mac-address 5CA4.8A64.4BD1
 type 7942
 button  1:23
!
!
!
ephone  27
 device-security-mode none
 mac-address 0004.F2F7.A905
 type 7937
 button  1:25
!
!
!
!
line con 0
line aux 0
line 2
 no activation-character
 no exec
 transport preferred none
 transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
 stopbits 1
line 67
 no activation-character
 no exec
 transport preferred none
 transport input all
 transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
 stopbits 1
 flowcontrol software
line vty 0 4
 login local
 transport input all
!
scheduler allocate 20000 1000
ntp server 192.168.1.1
!
end