vedge1# sh run system host-name vedge1 system-ip 172.16.1.1 site-id 2 admin-tech-on-failure no route-consistency-check organization-name champ-sdwan vbond 10.1.0.2 aaa auth-order local radius tacacs usergroup basic task system read write task interface read write ! usergroup netadmin ! usergroup operator task system read task interface read task policy read task routing read task security read ! usergroup tenantadmin ! user admin password $6$CGPiyP3mJqeBZ2t2$X.fsQEAvttG5EqPW1s1VIqCnXk6MKtZFaWWq8s.19GzksEVSE10vrtSHz4ATKFgDXN9ln6gVjVsYp63VosXVd0 ! user ciscotacro description CiscoTACReadOnly group operator status enabled ! user ciscotacrw description CiscoTACReadWrite group netadmin status enabled ! ! logging disk enable ! ! ! omp no shutdown graceful-restart advertise connected advertise static ! security ipsec authentication-type ah-sha1-hmac sha1-hmac ! ! vpn 0 interface ge0/0 ip address 192.168.0.171/24 ipv6 dhcp-client tunnel-interface encapsulation ipsec color biz-internet allow-service all no allow-service bgp allow-service dhcp allow-service dns allow-service icmp allow-service sshd allow-service netconf no allow-service ntp no allow-service ospf no allow-service stun allow-service https ! no shutdown ! interface ge0/1 ip address 192.168.14.171/24 tunnel-interface encapsulation ipsec color public-internet allow-service all no allow-service bgp allow-service dhcp allow-service dns allow-service icmp allow-service sshd allow-service netconf no allow-service ntp no allow-service ospf no allow-service stun allow-service https ! no shutdown ! ip route 10.1.0.0/24 192.168.0.116 ! vpn 10 interface ge0/3 ip address 10.2.0.254/24 no shutdown ! ip route 0.0.0.0/0 192.168.0.254 omp advertise network 10.2.0.0/24 ! ! vpn 512 interface eth0 ip dhcp-client ipv6 dhcp-client no shutdown ! !