406 lines
9.9 KiB
Plaintext
406 lines
9.9 KiB
Plaintext
!
|
|
! Last configuration change at 10:34:27 EST Wed Dec 9 2020 by cisco
|
|
! NVRAM config last updated at 10:30:35 EST Wed Dec 9 2020 by cisco
|
|
!
|
|
version 15.8
|
|
service timestamps debug datetime msec
|
|
service timestamps log datetime msec
|
|
service password-encryption
|
|
!
|
|
hostname R3
|
|
!
|
|
boot-start-marker
|
|
boot-end-marker
|
|
!
|
|
!
|
|
no logging console
|
|
enable secret 5 $1$FzJw$gcmddiSeZ5OBDPnYjSXLH.
|
|
!
|
|
aaa new-model
|
|
!
|
|
!
|
|
aaa authentication login default local
|
|
aaa authentication login CONSOLE none
|
|
aaa authorization exec default local
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
aaa session-id common
|
|
!
|
|
!
|
|
!
|
|
clock timezone EST -5 0
|
|
clock summer-time EDT recurring
|
|
mmi polling-interval 60
|
|
no mmi auto-configure
|
|
no mmi pvc
|
|
mmi snmp-timeout 180
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
ip dhcp excluded-address 10.1.80.129 10.1.80.131
|
|
!
|
|
ip dhcp pool Simulatedv4LAN
|
|
network 10.1.80.128 255.255.255.128
|
|
default-router 10.1.80.129
|
|
!
|
|
!
|
|
!
|
|
no ip domain lookup
|
|
ip domain name tshoot.net
|
|
crypto key generate rsa modulus 1024
|
|
ip cef
|
|
ipv6 unicast-routing
|
|
ipv6 cef
|
|
!
|
|
multilink bundle-name authenticated
|
|
!
|
|
!
|
|
!
|
|
crypto pki trustpoint TP-self-signed-4294967295
|
|
enrollment selfsigned
|
|
subject-name cn=IOS-Self-Signed-Certificate-4294967295
|
|
revocation-check none
|
|
rsakeypair TP-self-signed-4294967295
|
|
!
|
|
!
|
|
crypto pki certificate chain TP-self-signed-4294967295
|
|
file prompt quiet
|
|
username cisco secret 5 $1$aYBI$ywJtxuOaUtMfkkfrpeqIg0
|
|
!
|
|
redundancy
|
|
!
|
|
lldp run
|
|
!
|
|
track 4 interface GigabitEthernet0/0 line-protocol
|
|
delay down 30 up 30
|
|
!
|
|
track 5 list boolean or
|
|
object 4
|
|
object 31
|
|
!
|
|
track 31 ip sla 3
|
|
delay down 30 up 30
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
interface Loopback0
|
|
description iBGP Peer
|
|
ip address 192.168.3.1 255.255.255.255
|
|
ip ospf network point-to-point
|
|
ipv6 address FE80::3 link-local
|
|
ipv6 address 2001:DB8:CAFE:203::1/128
|
|
!
|
|
interface Loopback1
|
|
description Branch Office Simulated LAN
|
|
ip address pool Simulatedv4LAN
|
|
ipv6 address FE80::3 link-local
|
|
ipv6 address 2001:DB8:CAFE:801::1/64
|
|
!
|
|
interface GigabitEthernet0/0
|
|
ip address 209.165.200.221 255.255.255.252
|
|
duplex auto
|
|
speed auto
|
|
media-type rj45
|
|
ipv6 address FE80::3 link-local
|
|
ipv6 address 2001:DB8:FEED:14::3/126
|
|
no shutdown
|
|
!
|
|
interface GigabitEthernet0/1
|
|
description GE to DLS1
|
|
ip address 10.1.2.14 255.255.255.252
|
|
ip flow ingress
|
|
duplex full
|
|
speed 1000
|
|
media-type rj45
|
|
ipv6 address FE80::3 link-local
|
|
ipv6 address 2001:DB8:CAFE:212::3/64
|
|
no shutdown
|
|
!
|
|
interface GigabitEthernet0/2
|
|
ip address 10.1.90.3 255.255.255.254
|
|
duplex auto
|
|
speed auto
|
|
media-type rj45
|
|
ipv6 address FE80::3 link-local
|
|
ipv6 address 2001:DB8:CAFE:90::3/126
|
|
no shutdown
|
|
!
|
|
interface GigabitEthernet0/3
|
|
description Collocated Office LAN
|
|
ip address 10.1.80.1 255.255.255.128
|
|
ip helper-address 10.1.2.13
|
|
duplex full
|
|
speed 100
|
|
media-type rj45
|
|
ipv6 address FE80::3 link-local
|
|
ipv6 address 2001:DB8:CAFE:800::1/64
|
|
ipv6 nd prefix 2001:DB8:CAFE:800::/64 2592000 604800 no-autoconfig
|
|
ipv6 nd managed-config-flag
|
|
ipv6 dhcp relay destination 2001:DB8:CAFE:212::D2
|
|
ipv6 traffic-filter ALLOW-TCP-ICMP in
|
|
no shutdown
|
|
!
|
|
!
|
|
router eigrp HQ
|
|
!
|
|
address-family ipv4 unicast autonomous-system 1
|
|
!
|
|
af-interface default
|
|
shutdown
|
|
passive-interface
|
|
exit-af-interface
|
|
!
|
|
af-interface Loopback1
|
|
no shutdown
|
|
exit-af-interface
|
|
!
|
|
af-interface GigabitEthernet0/3
|
|
no shutdown
|
|
exit-af-interface
|
|
!
|
|
af-interface GigabitEthernet0/2
|
|
no shutdown
|
|
no passive-interface
|
|
exit-af-interface
|
|
!
|
|
topology base
|
|
exit-af-topology
|
|
network 10.1.80.0 0.0.0.255
|
|
network 10.1.90.2 0.0.0.1
|
|
exit-address-family
|
|
!
|
|
address-family ipv6 unicast autonomous-system 1
|
|
!
|
|
af-interface default
|
|
shutdown
|
|
passive-interface
|
|
exit-af-interface
|
|
!
|
|
af-interface Loopback1
|
|
no shutdown
|
|
exit-af-interface
|
|
!
|
|
af-interface GigabitEthernet0/3
|
|
no shutdown
|
|
exit-af-interface
|
|
!
|
|
af-interface GigabitEthernet0/2
|
|
no shutdown
|
|
no passive-interface
|
|
exit-af-interface
|
|
!
|
|
af-interface GigabitEthernet0/0
|
|
no shutdown
|
|
exit-af-interface
|
|
!
|
|
topology base
|
|
exit-af-topology
|
|
exit-address-family
|
|
!
|
|
!
|
|
router eigrp BRANCH
|
|
!
|
|
address-family ipv6 unicast autonomous-system 2
|
|
!
|
|
af-interface default
|
|
shutdown
|
|
passive-interface
|
|
exit-af-interface
|
|
!
|
|
af-interface Loopback0
|
|
no shutdown
|
|
exit-af-interface
|
|
!
|
|
af-interface GigabitEthernet0/1
|
|
no shutdown
|
|
no passive-interface
|
|
exit-af-interface
|
|
!
|
|
topology base
|
|
redistribute connected metric 2000 100 255 1 1500 route-map IPv6EIGRP&g0/0
|
|
redistribute bgp 65501 route-map IPv6METRIC
|
|
redistribute eigrp 1 metric 2000 100 255 1 1500
|
|
exit-af-topology
|
|
eigrp router-id 3.0.0.3
|
|
exit-address-family
|
|
!
|
|
router ospf 1
|
|
router-id 3.0.0.3
|
|
redistribute eigrp 1 metric 100 metric-type 1 subnets route-map EIGRP
|
|
redistribute bgp 65501 metric 100 metric-type 1 subnets
|
|
passive-interface default
|
|
no passive-interface GigabitEthernet0/1
|
|
network 10.1.2.12 0.0.0.3 area 0
|
|
network 192.168.3.1 0.0.0.0 area 0
|
|
default-information originate metric 100 metric-type 1
|
|
!
|
|
router bgp 65501
|
|
bgp router-id 3.0.0.3
|
|
bgp log-neighbor-changes
|
|
neighbor 192.168.1.1 remote-as 65501
|
|
neighbor 192.168.1.1 password 7 045802150C2E
|
|
neighbor 192.168.1.1 update-source Loopback0
|
|
neighbor 209.165.200.222 remote-as 65503
|
|
neighbor 209.165.200.222 password 7 110A1016141D
|
|
!
|
|
address-family ipv4
|
|
network 10.1.0.0 mask 255.255.0.0
|
|
network 192.168.3.1 mask 255.255.255.255
|
|
network 209.165.200.220 mask 255.255.255.252
|
|
neighbor 192.168.1.1 activate
|
|
neighbor 192.168.1.1 next-hop-self
|
|
neighbor 209.165.200.222 activate
|
|
exit-address-family
|
|
!
|
|
address-family ipv6
|
|
network 2001:DB8:CAFE::/48
|
|
network 2001:DB8:CAFE:203::1/128
|
|
network 2001:DB8:FEED:14::/126
|
|
network ABCD::/16
|
|
neighbor 192.168.1.1 activate
|
|
neighbor 192.168.1.1 next-hop-self
|
|
neighbor 192.168.1.1 route-map IPv4TransportIPv6RouteFromR1 in
|
|
neighbor 209.165.200.222 activate
|
|
neighbor 209.165.200.222 route-map IPv4TransportIPv6RouteFromR2 in
|
|
exit-address-family
|
|
!
|
|
ip forward-protocol nd
|
|
!
|
|
ip flow-top-talkers
|
|
top 3
|
|
sort-by bytes
|
|
cache-timeout 600000
|
|
!
|
|
ip http server
|
|
ip http secure-server
|
|
ip route 10.1.0.0 255.255.0.0 Null0
|
|
ip ssh source-interface Loopback0
|
|
!
|
|
!
|
|
ip prefix-list 20 seq 10 permit 10.1.90.2/31
|
|
ip prefix-list 20 seq 20 permit 10.1.80.0/25
|
|
ip prefix-list 20 seq 30 permit 10.1.80.128/25
|
|
ip prefix-list 20 seq 40 permit 20.20.20.20/32
|
|
ip sla 3
|
|
icmp-echo 209.165.200.225
|
|
frequency 10
|
|
ip sla schedule 3 life forever start-time now
|
|
logging source-interface Loopback0
|
|
logging host 10.1.100.1
|
|
ipv6 route 2001:DB8:CAFE::/48 Null0
|
|
ipv6 ioam timestamp
|
|
!
|
|
!
|
|
ipv6 prefix-list EIGRP seq 10 permit 2001:DB8:CAFE:90::/126
|
|
ipv6 prefix-list EIGRP seq 20 permit 2001:DB8:CAFE:801::/64
|
|
ipv6 prefix-list EIGRP seq 30 permit 2001:DB8:CAFE:800::/64
|
|
route-map IPv6g0/0 permit 10
|
|
match interface GigabitEthernet0/0
|
|
!
|
|
route-map EIGRP permit 10
|
|
match ip address prefix-list 20
|
|
!
|
|
route-map IPv4TransportIPv6RouteFromR1 permit 10
|
|
set ipv6 next-hop 2001:DB8:CAFE:201::1
|
|
!
|
|
route-map IPv4TransportIPv6RouteFromR2 permit 10
|
|
set ipv6 next-hop 2001:DB8:FEED:14::2
|
|
!
|
|
route-map IPv6METRIC permit 10
|
|
set metric 2000 100 255 1 1500
|
|
!
|
|
route-map IPv6EIGRP&g0/0 permit 10
|
|
match ipv6 address prefix-list EIGRP
|
|
set metric 2000 100 255 1 1500
|
|
!
|
|
snmp-server community cisco RO
|
|
snmp-server community san-fran RW
|
|
snmp-server trap-source Loopback0
|
|
snmp-server location TSHOOT Lab Facility
|
|
snmp-server contact support@tshoot.net
|
|
snmp-server chassis-id
|
|
snmp-server enable traps eigrp
|
|
snmp-server enable traps config
|
|
snmp-server enable traps cpu threshold
|
|
snmp-server host 10.1.100.1 version 2c cisco
|
|
!
|
|
!
|
|
!
|
|
!
|
|
control-plane
|
|
!
|
|
alias exec srb show run | begin router bgp
|
|
alias exec sro show run | begin router ospf
|
|
alias exec sre show run | begin router eigrp
|
|
alias exec sra show run | section event manager
|
|
alias exec srig show run inter g0/0
|
|
alias exec sira show ip route vrf VPN_A
|
|
alias exec sirb show ip route vrf VPN_B
|
|
alias exec sir show ip route
|
|
alias exec six show ipv6 route
|
|
alias exec sixa show ipv6 route vrf VPN_A
|
|
alias exec sixb show ipv6 route vrf VPN_B
|
|
banner exec ^C
|
|
**************************************************************************
|
|
* IOSv is strictly limited to use for evaluation, demonstration and IOS *
|
|
* education. IOSv is provided as-is and is not supported by Cisco's *
|
|
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
|
|
* of the IOSv Software or Documentation to any third party for any *
|
|
* purposes is expressly prohibited except as otherwise authorized by *
|
|
* Cisco in writing. *
|
|
**************************************************************************^C
|
|
banner incoming ^C
|
|
**************************************************************************
|
|
* IOSv is strictly limited to use for evaluation, demonstration and IOS *
|
|
* education. IOSv is provided as-is and is not supported by Cisco's *
|
|
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
|
|
* of the IOSv Software or Documentation to any third party for any *
|
|
* purposes is expressly prohibited except as otherwise authorized by *
|
|
* Cisco in writing. *
|
|
**************************************************************************^C
|
|
banner login ^C
|
|
**************************************************************************
|
|
* IOSv is strictly limited to use for evaluation, demonstration and IOS *
|
|
* education. IOSv is provided as-is and is not supported by Cisco's *
|
|
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
|
|
* of the IOSv Software or Documentation to any third party for any *
|
|
* purposes is expressly prohibited except as otherwise authorized by *
|
|
* Cisco in writing. *
|
|
**************************************************************************^C
|
|
banner motd ^C*** Router R3 Skills Assessment BASE Config ***^C
|
|
!
|
|
line con 0
|
|
exec-timeout 0 0
|
|
logging synchronous
|
|
login authentication local
|
|
line aux 0
|
|
line vty 0 4
|
|
exec-timeout 0 0
|
|
logging synchronous
|
|
transport input ssh
|
|
!
|
|
no scheduler allocate
|
|
ntp source Loopback0
|
|
ntp update-calendar
|
|
ntp server 2.2.2.2
|
|
!
|
|
end |