323 lines
7.7 KiB
Plaintext
323 lines
7.7 KiB
Plaintext
!
|
|
! Last configuration change at 10:34:24 EST Wed Dec 9 2020 by cisco
|
|
! NVRAM config last updated at 10:30:32 EST Wed Dec 9 2020 by cisco
|
|
!
|
|
version 15.8
|
|
service timestamps debug datetime msec
|
|
service timestamps log datetime msec
|
|
service password-encryption
|
|
!
|
|
hostname R1
|
|
!
|
|
boot-start-marker
|
|
boot-end-marker
|
|
!
|
|
!
|
|
logging buffered 16384
|
|
no logging console
|
|
enable secret 5 $1$Sx.7$/sGeJMk4CaAzFqBG3Eafe.
|
|
!
|
|
aaa new-model
|
|
!
|
|
!
|
|
aaa authentication login default local
|
|
aaa authentication login CONSOLE none
|
|
aaa authorization exec default local
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
aaa session-id common
|
|
!
|
|
!
|
|
!
|
|
clock timezone EST -5 0
|
|
clock summer-time EDT recurring
|
|
mmi polling-interval 60
|
|
no mmi auto-configure
|
|
no mmi pvc
|
|
mmi snmp-timeout 180
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
no ip domain lookup
|
|
ip domain name tshoot.net
|
|
crypto key generate rsa modulus 1024
|
|
ip cef
|
|
ipv6 unicast-routing
|
|
ipv6 cef
|
|
!
|
|
multilink bundle-name authenticated
|
|
!
|
|
!
|
|
!
|
|
crypto pki trustpoint TP-self-signed-4294967295
|
|
enrollment selfsigned
|
|
subject-name cn=IOS-Self-Signed-Certificate-4294967295
|
|
revocation-check none
|
|
rsakeypair TP-self-signed-4294967295
|
|
!
|
|
!
|
|
crypto pki certificate chain TP-self-signed-4294967295
|
|
username cisco secret 5 $1$I0qI$Pc89EOShw/klcqTDjI08g.
|
|
!
|
|
redundancy
|
|
!
|
|
lldp run
|
|
!
|
|
track 2 interface GigabitEthernet0/0 line-protocol
|
|
delay down 30 up 30
|
|
!
|
|
track 4 list boolean and
|
|
object 2
|
|
object 17
|
|
object 19
|
|
!
|
|
track 17 ip sla 3
|
|
delay down 30 up 30
|
|
!
|
|
track 19 ip sla 5
|
|
delay down 30 up 30
|
|
!
|
|
track 23 list boolean and
|
|
object 19 not
|
|
delay down 30 up 30
|
|
!
|
|
track 37 list boolean or
|
|
object 17
|
|
object 23
|
|
delay down 30 up 30
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
interface Loopback0
|
|
description iBGP Peer
|
|
ip address 192.168.1.1 255.255.255.255
|
|
ip ospf network point-to-point
|
|
ipv6 address FE80::1 link-local
|
|
ipv6 address 2001:DB8:CAFE:201::1/128
|
|
!
|
|
interface GigabitEthernet0/0
|
|
description WAN link to R2
|
|
ip address 209.165.200.225 255.255.255.252
|
|
duplex full
|
|
speed 1000
|
|
media-type rj45
|
|
ipv6 address FE80::1 link-local
|
|
ipv6 address 2001:DB8:FEED:10::1/126
|
|
no shutdown
|
|
!
|
|
interface GigabitEthernet0/1
|
|
description FE to DLS1
|
|
ip address 10.1.2.2 255.255.255.252
|
|
ip flow ingress
|
|
duplex full
|
|
speed 1000
|
|
media-type rj45
|
|
ipv6 address FE80::1 link-local
|
|
ipv6 address 2001:DB8:CAFE:20::1/64
|
|
no shutdown
|
|
!
|
|
interface GigabitEthernet0/2
|
|
no ip address
|
|
shutdown
|
|
duplex auto
|
|
speed auto
|
|
media-type rj45
|
|
!
|
|
interface GigabitEthernet0/3
|
|
no ip address
|
|
shutdown
|
|
duplex auto
|
|
speed auto
|
|
media-type rj45
|
|
!
|
|
!
|
|
router eigrp BRANCH
|
|
!
|
|
address-family ipv6 unicast autonomous-system 2
|
|
!
|
|
af-interface default
|
|
shutdown
|
|
passive-interface
|
|
exit-af-interface
|
|
!
|
|
af-interface GigabitEthernet0/1
|
|
no shutdown
|
|
no passive-interface
|
|
exit-af-interface
|
|
!
|
|
af-interface Loopback0
|
|
no shutdown
|
|
exit-af-interface
|
|
!
|
|
topology base
|
|
redistribute connected metric 2000 100 255 1 1500
|
|
redistribute bgp 65501 metric 2000 100 255 1 1500 route-map IPv6METRIC
|
|
exit-af-topology
|
|
eigrp router-id 11.0.0.11
|
|
exit-address-family
|
|
!
|
|
router ospf 1
|
|
router-id 1.0.0.1
|
|
redistribute bgp 65501 metric 100 metric-type 1 subnets
|
|
passive-interface default
|
|
no passive-interface GigabitEthernet0/1
|
|
network 10.1.2.0 0.0.0.3 area 0
|
|
network 192.168.1.1 0.0.0.0 area 0
|
|
default-information originate metric 100 metric-type 1
|
|
!
|
|
router bgp 65501
|
|
bgp router-id 1.0.0.1
|
|
bgp log-neighbor-changes
|
|
neighbor 192.168.3.1 remote-as 65501
|
|
neighbor 192.168.3.1 password 7 02050D480809
|
|
neighbor 192.168.3.1 update-source Loopback0
|
|
neighbor 209.165.200.226 remote-as 65502
|
|
neighbor 209.165.200.226 password 7 110A1016141D
|
|
!
|
|
address-family ipv4
|
|
network 10.1.0.0 mask 255.255.0.0
|
|
network 192.168.1.1 mask 255.255.255.255
|
|
network 209.165.200.224 mask 255.255.255.252
|
|
neighbor 192.168.3.1 activate
|
|
neighbor 192.168.3.1 next-hop-self
|
|
neighbor 209.165.200.226 activate
|
|
exit-address-family
|
|
!
|
|
address-family ipv6
|
|
network 2001:DB8:CAFE::/48
|
|
network 2001:DB8:CAFE:201::1/128
|
|
network 2001:DB8:FEED:10::/126
|
|
network ABCD::/16
|
|
neighbor 192.168.3.1 activate
|
|
neighbor 192.168.3.1 next-hop-self
|
|
neighbor 192.168.3.1 route-map IPv4TransportIPv6RouteFromR3 in
|
|
neighbor 209.165.200.226 activate
|
|
neighbor 209.165.200.226 route-map IPv4TransportIPv6RouteFromR2 in
|
|
exit-address-family
|
|
!
|
|
ip forward-protocol nd
|
|
!
|
|
ip flow-top-talkers
|
|
top 3
|
|
sort-by bytes
|
|
cache-timeout 600000
|
|
!
|
|
ip http server
|
|
ip http secure-server
|
|
ip route 10.1.0.0 255.255.0.0 Null0
|
|
ip ssh source-interface Loopback0
|
|
!
|
|
ip sla 3
|
|
icmp-echo 209.165.200.221
|
|
frequency 10
|
|
ip sla schedule 3 life forever start-time now
|
|
ip sla 5
|
|
icmp-echo 10.1.2.14
|
|
frequency 10
|
|
ip sla schedule 5 life forever start-time now
|
|
logging source-interface Loopback0
|
|
logging host 10.1.100.1
|
|
ipv6 route 2001:DB8:CAFE::/48 Null0
|
|
ipv6 ioam timestamp
|
|
!
|
|
route-map IPv6g0/0 permit 10
|
|
match interface GigabitEthernet0/0
|
|
!
|
|
route-map IPv4TransportIPv6RouteFromR2 permit 10
|
|
set ipv6 next-hop 2001:DB8:FEED:10::2
|
|
!
|
|
route-map IPv4TransportIPv6RouteFromR3 permit 10
|
|
set ipv6 next-hop 2001:DB8:CAFE:203::1
|
|
!
|
|
route-map IPv6METRIC permit 10
|
|
set metric 2000 100 255 1 1500
|
|
!
|
|
snmp-server community cisco RO
|
|
snmp-server community san-fran RW
|
|
snmp-server trap-source Loopback0
|
|
snmp-server location TSHOOT Lab Facility
|
|
snmp-server contact support@tshoot.net
|
|
snmp-server chassis-id
|
|
snmp-server enable traps eigrp
|
|
snmp-server enable traps config
|
|
snmp-server enable traps cpu threshold
|
|
snmp-server host 10.1.100.1 version 2c cisco
|
|
!
|
|
access-list 20 permit 20.0.0.0 0.255.255.255
|
|
access-list 30 permit 10.1.99.0 0.0.0.255
|
|
access-list 30 permit 10.1.100.0 0.0.0.255
|
|
access-list 30 permit 10.1.110.0 0.0.0.255
|
|
access-list 30 permit 10.1.200.0 0.0.0.255
|
|
access-list 30 permit 10.1.30.0 0.0.0.255
|
|
!
|
|
!
|
|
!
|
|
control-plane
|
|
!
|
|
banner exec ^C
|
|
**************************************************************************
|
|
* IOSv is strictly limited to use for evaluation, demonstration and IOS *
|
|
* education. IOSv is provided as-is and is not supported by Cisco's *
|
|
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
|
|
* of the IOSv Software or Documentation to any third party for any *
|
|
* purposes is expressly prohibited except as otherwise authorized by *
|
|
* Cisco in writing. *
|
|
**************************************************************************^C
|
|
banner incoming ^C
|
|
**************************************************************************
|
|
* IOSv is strictly limited to use for evaluation, demonstration and IOS *
|
|
* education. IOSv is provided as-is and is not supported by Cisco's *
|
|
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
|
|
* of the IOSv Software or Documentation to any third party for any *
|
|
* purposes is expressly prohibited except as otherwise authorized by *
|
|
* Cisco in writing. *
|
|
**************************************************************************^C
|
|
banner login ^C
|
|
**************************************************************************
|
|
* IOSv is strictly limited to use for evaluation, demonstration and IOS *
|
|
* education. IOSv is provided as-is and is not supported by Cisco's *
|
|
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
|
|
* of the IOSv Software or Documentation to any third party for any *
|
|
* purposes is expressly prohibited except as otherwise authorized by *
|
|
* Cisco in writing. *
|
|
**************************************************************************^C
|
|
banner motd ^C*** Router R1 Skills Assessment BASE Config ***^C
|
|
!
|
|
line con 0
|
|
exec-timeout 0 0
|
|
logging synchronous
|
|
login authentication local
|
|
line aux 0
|
|
line vty 0 4
|
|
exec-timeout 0 0
|
|
logging synchronous
|
|
transport input ssh
|
|
!
|
|
no scheduler allocate
|
|
ntp source Loopback0
|
|
ntp update-calendar
|
|
ntp server 2.2.2.2
|
|
!
|
|
end |