Hello, here is the current config:
show run
Building configuration...
Current configuration : 15410 bytes
!
! Last configuration change at 08:43:45 PDT Thu Jul 30 2015 by amsnet
! NVRAM config last updated at 08:43:46 PDT Thu Jul 30 2015 by amsnet
!
version 15.5
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname EKEMBL-2951
!
boot-start-marker
boot system flash flash0:c2951-universalk9-mz.SPA.155-2.T1.bin
boot system flash flash0:c2951-universalk9-mz.SPA.152-2.T.bin
boot-end-marker
!
!
logging buffered 32768
enable secret 5 $1$lFee$Dtdcjo3qvu7qSw/p3Kkxl1
!
no aaa new-model
ethernet lmi ce
bsd-client server url https://cloudsso.cisco.com/as/token.oauth2
clock timezone PST -8 0
clock summer-time PDT recurring
!
!
!
!
!
!
!
!
!
!
!
!
no ip domain lookup
ip domain name sac-city.k12.ca.us
ip multicast-routing
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
trunk group Analog
description Analog Trunk Group
hunt-scheme sequential both down
!
cts logging verbose
!
crypto pki trustpoint TP-self-signed-117389201
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-117389201
revocation-check none
rsakeypair TP-self-signed-117389201
!
!
crypto pki certificate chain TP-self-signed-117389201
certificate self-signed 01
30820254 308201BD A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31313733 38393230 31301E17 0D313230 32313030 30303933
365A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3131 37333839
32303130 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
E9CDE6B1 B055EF15 C8ACF1ED C448A4DB 31E459BA 0B85F1AA EC2C5B86 CEC957C0
BD21B1D1 B9238CEC 7935A873 1C4442D8 C7B97D76 EA2716B6 C6CE5A67 2F773260
D9003965 330B93B8 FDA1FE87 44CB3ED2 569B9F17 B7A9EA9D 509B65BA 7EADF499
BAF0CC34 4F653B6B 2688F4AC 2A49807F AEFEFFC5 0DBB1C73 A011F5F4 F0FD9F4F
02030100 01A37E30 7C300F06 03551D13 0101FF04 05300301 01FF3029 0603551D
11042230 20821E45 4B454D42 4C2D3239 35312E73 61632D63 6974792E 6B31322E
63612E75 73301F06 03551D23 04183016 80149750 B2715610 1D591859 CBC3BE0A
55D03221 5017301D 0603551D 0E041604 149750B2 7156101D 591859CB C3BE0A55
D0322150 17300D06 092A8648 86F70D01 01040500 03818100 9A188C25 188370F2
78C0473C FE3284FB 4A8A0485 99967A4A F8026F9C 34722CB2 314BB385 758CC308
E452369B E0D74A4D E8A3F639 0CC53876 E6FA08D2 16FB4258 0FCD3204 705AC711
95A6600D 3769F46D 1B71C432 6373D470 269D19CF 6ECAD58F 1167E257 CC53301F
59FAD61E DF7A9BD0 00BE156B AA45D027 8767CEFE 5E2172FE
quit
voice-card 0
dspfarm
dsp services dspfarm
!
!
!
voice service voip
ip address trusted list
ipv4 0.0.0.0 0.0.0.0
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
sip
registrar server expires max 600 min 60
redirect contact order best-match
!
!
!
!
voice register global
mode esrst
system message CM Fallback Service Operating
max-dn 100
max-pool 200
!
voice register dn 1
number 211000
shared-line
!
voice register pool 1
id network 10.67.200.0 mask 255.255.255.0
no digit collect kpml
!
voice register pool 2
id network 10.67.201.0 mask 255.255.255.0
no digit collect kpml
!
voice register pool 3
id network 10.67.202.0 mask 255.255.255.0
no digit collect kpml
!
voice register pool 4
id network 10.67.203.0 mask 255.255.255.0
no digit collect kpml
!
voice register pool 5
id network 10.67.204.0 mask 255.255.255.0
no digit collect kpml
!
voice register pool 6
id network 10.67.205.0 mask 255.255.255.0
no digit collect kpml
!
voice register pool 7
id network 10.67.206.0 mask 255.255.255.0
no digit collect kpml
!
voice register pool 8
id network 10.67.207.0 mask 255.255.255.0
no digit collect kpml
!
!
!
!
!
!
application
global
service alternate Default
!
!
license udi pid CISCO2951/K9 sn FTX1603AH12
hw-module pvdm 0/0
!
!
!
username admin privilege 15 secret 5 $1$V4t7$cDclqEj3mssum1mAAtjKx1
username amsnet privilege 15 secret 5 $1$u.f4$Q2XOklWc3UCICOAMyt4YM/
username tech privilege 7 password 7 1079013911011B581B
username prime privilege 15 secret 5 $1$ax2f$uqIfymLghEsr9vtAzpkwh.
!
redundancy
!
!
!
class-map match-all VVLAN-ANY
match access-group name VVLAN-ANY
class-map match-any Network_Control
match ip dscp cs6
class-map match-all Default
match ip dscp default
class-map match-all Voice_Control
match ip dscp cs3
class-map match-all Video
match ip dscp af41
class-map match-all Voice
match ip dscp ef
class-map match-all Scavenger
match ip dscp cs1
class-map match-all District-VOICE
match access-group name District-VOICE
class-map match-all District-CALL-SIGNALING
match access-group name District-CALL-SIGNALING
!
policy-map QOS_Out
class Voice
priority
class Voice_Control
police 600000 1500 conform-action transmit exceed-action set-dscp-transmit cs1
class Video
police 2000000 1500 conform-action transmit exceed-action set-dscp-transmit cs1
class Network_Control
police 200000 1500 conform-action transmit exceed-action set-dscp-transmit cs1
class Scavenger
police 600000 1500 conform-action transmit exceed-action set-dscp-transmit default
class class-default
policy-map QOS_In
class District-VOICE
set dscp ef
class District-CALL-SIGNALING
set dscp cs3
class VVLAN-ANY
set dscp cs1
class class-default
set dscp default
policy-map Parent_Policy
class class-default
shape average 100000000
service-policy QOS_Out
!
!
!
!
!
interface Loopback1
ip address 10.67.255.1 255.255.255.255
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description Circuit 15L2XN000126-001PT
no ip address
duplex full
speed 100
!
interface GigabitEthernet0/0.1
encapsulation dot1Q 1 native
!
interface GigabitEthernet0/0.41
description Wan_Uplink
encapsulation dot1Q 41
ip address 172.17.0.134 255.255.255.252
ip access-group SRST in
ip pim sparse-mode
ip ospf network point-to-point
service-policy output Parent_Policy
!
interface GigabitEthernet0/1
description Kemble_Core_Uplink
ip address 10.67.254.1 255.255.255.252
ip pim sparse-mode
ip ospf network point-to-point
duplex auto
speed auto
service-policy input QOS_In
!
interface GigabitEthernet0/2
description Chavez_Core_Uplink
ip address 10.68.254.1 255.255.255.252
no ip redirects
ip pim sparse-mode
ip ospf network point-to-point
duplex auto
speed auto
service-policy input QOS_In
!
router ospf 1
area 67 stub no-summary
area 67 range 10.67.0.0 255.255.0.0
area 68 stub no-summary
network 10.67.254.0 0.0.0.3 area 67
network 10.68.254.0 0.0.0.3 area 68
network 172.17.0.132 0.0.0.3 area 0
network 0.0.0.0 255.255.255.255 area 67
!
ip forward-protocol nd
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip pim rp-address 10.7.255.1
!
ip access-list standard SRST
deny 10.7.200.11
deny 10.7.200.10
permit any
!
ip access-list extended District-CALL-SIGNALING
permit tcp 10.67.192.0 0.0.31.255 any range 2000 2002
ip access-list extended District-VOICE
permit udp 10.67.192.0 0.0.31.255 any range 16384 32767
ip access-list extended VVLAN-ANY
permit ip 10.67.192.0 0.0.31.255 any
!
logging host 10.7.98.9
logging host 10.7.98.249
!
nls resp-timeout 1
cpd cr-id 1
!
snmp-server community $monitor RO
snmp-server community Whattraps RW
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps vrrp
snmp-server enable traps ds1
snmp-server enable traps call-home message-send-fail server-fail
snmp-server enable traps tty
snmp-server enable traps eigrp
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps ospf retransmit
snmp-server enable traps ospf lsa
snmp-server enable traps ospf cisco-specific state-change nssa-trans-change
snmp-server enable traps ospf cisco-specific state-change shamlink interface
snmp-server enable traps ospf cisco-specific state-change shamlink neighbor
snmp-server enable traps ospf cisco-specific errors
snmp-server enable traps ospf cisco-specific retransmit
snmp-server enable traps ospf cisco-specific lsa
snmp-server enable traps gatekeeper
snmp-server enable traps xgcp
snmp-server enable traps license
snmp-server enable traps envmon
snmp-server enable traps flash insertion
snmp-server enable traps flash removal
snmp-server enable traps c3g
snmp-server enable traps ds3
snmp-server enable traps adslline
snmp-server enable traps vdsl2line
snmp-server enable traps icsudsu
snmp-server enable traps isdn call-information
snmp-server enable traps isdn layer2
snmp-server enable traps isdn chan-not-avail
snmp-server enable traps isdn ietf
snmp-server enable traps ds0-busyout
snmp-server enable traps ds1-loopback
snmp-server enable traps energywise
snmp-server enable traps mac-notification
snmp-server enable traps bgp
snmp-server enable traps isis
snmp-server enable traps aaa_server
snmp-server enable traps atm subif
snmp-server enable traps cef resource-failure peer-state-change peer-fib-state-change inconsistency
snmp-server enable traps memory bufferpeak
snmp-server enable traps cnpd
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps config-ctid
snmp-server enable traps entity
snmp-server enable traps fru-ctrl
snmp-server enable traps resource-policy
snmp-server enable traps event-manager
snmp-server enable traps frame-relay multilink bundle-mismatch
snmp-server enable traps frame-relay
snmp-server enable traps frame-relay subif
snmp-server enable traps hsrp
snmp-server enable traps ipmulticast
snmp-server enable traps msdp
snmp-server enable traps mvpn
snmp-server enable traps nhrp nhs
snmp-server enable traps nhrp nhc
snmp-server enable traps nhrp nhp
snmp-server enable traps nhrp quota-exceeded
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-message
snmp-server enable traps pppoe
snmp-server enable traps cpu threshold
snmp-server enable traps rsvp
snmp-server enable traps l2tun session
snmp-server enable traps l2tun pseudowire status
snmp-server enable traps vtp
snmp-server enable traps ethernet cfm cc mep-up mep-down cross-connect loop config
snmp-server enable traps ethernet cfm crosscheck mep-missing mep-unknown service-up
snmp-server enable traps ipsla
snmp-server enable traps dial
snmp-server enable traps dsp card-status
snmp-server enable traps dsp oper-state
snmp-server enable traps rf
snmp-server enable traps ccme
snmp-server enable traps srst
snmp-server enable traps voice
snmp-server enable traps dnis
snmp-server host 10.7.98.249 $monitor
snmp-server host 10.7.98.249 Wh@ttr@ps
snmp-server host 10.7.98.9 Whattraps
!
control-plane
!
!
voice-port 0/0/0
trunk-group Analog 1
timing hookflash-out 50
timing guard-out 1000
connection plar 211000
description Backup Analog 916-433-5026
caller-id enable
!
voice-port 0/0/1
trunk-group Analog 2
timing hookflash-out 50
timing guard-out 1000
connection plar 211000
description Backup Analog 916-433-5027
caller-id enable
!
voice-port 0/0/2
timing hookflash-out 50
timing guard-out 1000
!
voice-port 0/0/3
timing hookflash-out 50
timing guard-out 1000
!
voice-port 0/1/0
timing hookflash-out 50
timing guard-out 1000
description Paging Integration
!
voice-port 0/1/1
!
voice-port 0/1/2
!
voice-port 0/1/3
!
voice-port 0/2/0
description Intercom Modem 916-395-3928
!
voice-port 0/2/1
!
voice-port 0/2/2
!
voice-port 0/2/3
!
voice-port 0/3/0
!
voice-port 0/3/1
!
voice-port 0/3/2
!
voice-port 0/3/3
!
!
!
!
!
mgcp
mgcp call-agent 10.7.200.11 2427 service-type mgcp version 0.1
mgcp rtp unreachable timeout 1000 action notify
mgcp modem passthrough voip mode nse
mgcp package-capability rtp-package
mgcp package-capability sst-package
mgcp package-capability pre-package
no mgcp package-capability res-package
no mgcp timer receive-rtcp
mgcp sdp simple
mgcp fax t38 inhibit
mgcp bind control source-interface GigabitEthernet0/1
mgcp bind media source-interface GigabitEthernet0/1
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
ccm-manager music-on-hold
!
ccm-manager fallback-mgcp
ccm-manager redundant-host 10.7.200.10
ccm-manager mgcp
no ccm-manager fax protocol cisco
ccm-manager config server 10.7.200.10
ccm-manager config
!
dial-peer voice 99900990 pots
service mgcpapp
port 0/0/0
!
dial-peer voice 99900991 pots
service mgcpapp
port 0/0/1
!
dial-peer voice 99900992 pots
service mgcpapp
port 0/0/2
!
dial-peer voice 99900993 pots
service mgcpapp
port 0/0/3
!
dial-peer voice 99901990 pots
service mgcpapp
port 0/1/0
!
dial-peer voice 99902990 pots
service mgcpapp
port 0/2/0
!
dial-peer voice 999000 pots
service mgcpapp
port 0/0/0
!
dial-peer voice 999001 pots
service mgcpapp
port 0/0/1
!
dial-peer voice 999002 pots
service mgcpapp
port 0/0/2
!
dial-peer voice 999003 pots
service mgcpapp
port 0/0/3
!
dial-peer voice 999010 pots
service mgcpapp
port 0/1/0
!
dial-peer voice 999020 pots
service mgcpapp
port 0/2/0
!
dial-peer voice 99900099 pots
service mgcpapp
port 0/0/0
!
dial-peer voice 99900199 pots
service mgcpapp
port 0/0/1
!
dial-peer voice 99900299 pots
service mgcpapp
port 0/0/2
!
dial-peer voice 99900399 pots
service mgcpapp
port 0/0/3
!
dial-peer voice 99901099 pots
service mgcpapp
port 0/1/0
!
dial-peer voice 99902099 pots
service mgcpapp
port 0/2/0
!
dial-peer voice 911 pots
trunkgroup Analog
destination-pattern 911
forward-digits all
prefix 8
!
dial-peer voice 8911 pots
trunkgroup Analog
destination-pattern 8911
forward-digits 4
!
dial-peer voice 7 pots
trunkgroup Analog
destination-pattern 8[2-9]......
forward-digits 9
!
dial-peer voice 999999 pots
destination-pattern #
port 0/1/0
forward-digits 0
prefix #00*
!
dial-peer voice 11 pots
trunkgroup Analog
destination-pattern 81[2-9].........
forward-digits 12
!
!
sip-ua
refer-ood enable
!
!
!
gatekeeper
shutdown
!
!
call-manager-fallback
max-conferences 4 gain -6
transfer-system full-consult
timeouts interdigit 2
ip source-address 10.67.254.1 port 2000
max-ephones 150
default-destination 211000
!
!
banner login ^CC
-----------------------------------------------------------------------
WARNING! Unauthorized use of this system is prohibited.
You will be prosecuted to the full extent of the law.
-----------------------------------------------------------------------^C
banner motd ^CC
-----------------------------------------------------------------------
WARNING! Unauthorized use of this system is prohibited.
You will be prosecuted to the full extent of the law.
-----------------------------------------------------------------------^C
!
line con 0
login local
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
privilege level 15
login local
transport input telnet ssh
line vty 5 15
privilege level 15
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
ntp server 172.17.0.133
!
end
EKEMBL-2951#
