Building configuration... Current configuration : 22162 bytes ! ! Last configuration change at 09:48:05 MSK Thu Jul 21 2022 by akhmetzyanovrr_adm ! NVRAM config last updated at 00:59:59 MSK Thu Jul 28 2022 ! version 15.7 service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone year service timestamps log datetime msec localtime show-timezone year no service password-encryption ! hostname IZH-TK-SMR-RT-1-1 ! boot-start-marker boot system flash:c2900-universalk9-mz.SPA.157-3.M4b.bin boot-end-marker ! ! logging buffered 51200 warnings logging rate-limit 10000 enable secret 4 GnU6rC0jHVHHJAcMv4O5/bBvmwvMMRwqyCrVkafWfAw ! aaa new-model ! ! aaa group server radius NPS server name IZH-RDS002 server name P11-RDS003 ip radius source-interface GigabitEthernet0/0.300 load-balance method least-outstanding ! aaa authentication login default group NPS local enable aaa authentication login CONSOLE local group NPS aaa authorization exec default group NPS local if-authenticated ! ! ! ! ! ! aaa session-id common clock timezone MSK 4 0 clock calendar-valid ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ip flow-cache timeout inactive 60 ip flow-cache timeout active 5 no ip domain lookup ip domain name komos.ru ip host VM-KG-NET 10.1.12.70 ip host tftp 10.4.0.214 ip name-server 92.61.16.1 ip name-server 87.249.224.1 ip accounting-threshold 20000 ip cef login on-failure log login on-success log no ipv6 cef ! ! flow exporter NAT_FLOW description NAT_FLOW_vremenno destination 10.4.0.214 source GigabitEthernet0/2 transport udp 2055 ! ! flow monitor NAT_FLOW exporter NAT_FLOW record netflow-original ! multilink bundle-name authenticated ! ! ! ! key chain EIGRP_KEY_CHAIN key 1 key-string 7 1212551A42180B167A3E34 ! crypto pki trustpoint TP-self-signed-2869583224 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-2869583224 revocation-check none rsakeypair TP-self-signed-2869583224 ! ! crypto pki certificate chain TP-self-signed-2869583224 certificate self-signed 01 3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030 31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 69666963 6174652D 32383639 35383332 3234301E 170D3134 30353132 31333534 35375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 38363935 38333232 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 8100CBE3 853B43A9 B773E629 F7ACFA30 A1088FC8 D4E89AC6 0822444F C087B66C A4CDB86B 5898E8E8 EC3F11C8 EDA37391 2D6909D4 18F53AEE E170AB3D 5570E169 78840883 CC7091DF 61E01D4E 908F1A0E 42BF9B91 F57D9754 1D7149F2 BC361E60 8DA993DE A124B415 F36A3735 D9FEBDB6 47314927 B523D122 92BA3D23 7CEAB29B 877D0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603 551D2304 18301680 149EF925 535D4EC0 03E203F2 C2E71468 912EB70B 0C301D06 03551D0E 04160414 9EF92553 5D4EC003 E203F2C2 E7146891 2EB70B0C 300D0609 2A864886 F70D0101 05050003 81810040 215A9E2A 98FE3D83 8D86733D 22A9F861 A95E1B92 C13E14C8 3C186290 DD45A747 13E01F2D 368B3831 05BD2107 095436F2 682A58E9 73D48B8B 79D5AD6C FF7342D7 434B72BE 550AFE88 C19D897B 66C47140 B60A273E F672E427 58DC1030 DBB48159 9D2C6565 48FDBAE1 742F2B2C 3C051EC2 A207EB07 642505C3 A7269FAA 87F8E1 quit license udi pid CISCO2911/K9 sn JTV1724T950 license accept end user agreement license boot module c2900 technology-package securityk9 license boot module c2900 technology-package datak9 ! ! archive log config logging enable logging size 900 notify syslog contenttype plaintext hidekeys path tftp://tftp/IZH/TK/SMR-RT/$H.$T.conf write-memory time-period 10080 object-group network OBJ_BBN_RN_BBN host 85.140.32.104 host 78.85.13.205 ! object-group network OBJ_BBN_VST_BBN host 85.140.32.103 host 83.169.220.204 ! object-group network OBJ_IZH_MLK_IZM host 85.140.32.27 host 78.85.13.42 host 5.227.126.169 host 31.173.105.54 host 217.14.195.253 host 85.175.86.74 ! object-group network OBJ_IZH_KG_P11 91.240.179.0 255.255.255.0 host 5.227.124.143 host 78.85.13.93 host 62.141.96.126 host 84.201.247.190 host 88.80.33.50 host 94.25.46.122 ! object-group network OBJ_IZH_VST_IZM host 5.227.124.82 host 78.85.13.38 ! object-group network OBJ_IZH_TK_M44 host 212.46.204.74 host 88.80.33.162 ! object-group network OBJ_IZH_TK_M48 host 87.249.237.250 ! object-group network OBJ_IZH_TK_SMR host 87.249.239.226 host 88.80.33.42 ! object-group network OBJ_MSK_KG_MSK host 185.62.195.150 host 185.6.175.101 ! object-group network OBJ_GLZ_MLK_GMK host 31.173.105.62 host 85.140.32.29 ! object-group network OBJ_KZN_MLK_KMK host 83.69.126.54 host 94.180.253.210 host 78.138.171.82 ! object-group network OBJ_KEZ_MLK_KZS host 31.173.105.66 host 78.85.13.52 host 85.140.32.30 ! object-group network OBJ_PRM_MLK_PHK host 178.47.128.18 host 46.146.210.68 ! object-group network OBJ_SAR_MLK_SRM host 31.173.105.58 host 78.85.13.53 host 85.140.32.28 ! object-group network OBJ_CLB_MLK_CMK host 37.113.128.241 host 149.255.6.35 ! object-group network OBJ_GLZ_GKZ_GKZ host 78.85.13.94 host 146.120.104.181 ! object-group network OBJ_KIA_RN_KIA host 78.85.14.97 ! object-group network OBJ_IZH_TZK_TZK host 78.25.80.134 host 5.227.124.235 ! object-group network OBJ_IZH_MK_VS17 host 5.227.124.141 ! object-group network OBJ_IZH_KL_KLI host 78.85.15.85 host 84.201.247.24 host 79.175.36.97 host 84.201.244.235 ! object-group network OBJ_EKB_KG_EKB host 62.168.232.182 host 176.215.14.11 ! object-group network OBJ_IZH_KEN_VS56 host 83.143.54.246 host 92.55.54.109 ! object-group network OBJ_IZH_VRS_IZM host 85.140.32.177 host 78.85.14.98 ! object-group network OBJ_GLZ_VRS_UPF host 95.215.208.234 host 78.85.13.119 ! object-group network OBJ_IZH_VRS_IPF host 85.140.32.141 host 78.85.13.117 ! object-group network OBJ_IZH_VRS_PFV host 85.140.32.178 host 94.181.119.90 host 78.85.33.50 ! object-group network OBJ_VOT_VRS_VPF host 78.85.13.118 host 88.80.33.14 ! object-group network OBJ_MSB_TMA_MSB host 78.138.182.214 ! object-group network OBJ_KIB_TMA_KIB host 78.138.182.126 ! object-group network OBJ_PRM_VRS_MPF host 178.47.130.10 host 5.227.121.127 ! object-group network OBJ_LAI_VRS_DPF host 178.205.241.114 host 46.232.164.108 ! object-group network OBJ_SHM_TMA_SHM host 89.232.91.106 host 31.173.182.210 ! object-group network OBJ_EVL_TMA_EVL host 89.232.102.166 ! object-group network OBJ_ITL_VST_ITL host 5.227.124.130 host 78.85.34.99 host 81.211.13.82 ! object-group network OBJ_MZH_VST_MZH host 88.80.33.250 host 83.169.220.171 ! object-group network OBJ_KIA_VST_KIA host 85.140.32.24 host 188.94.168.238 ! object-group network OBJ_KGB_VST_KBB host 78.85.37.88 host 88.80.33.154 ! object-group network OBJ_SAR_VST_SMK host 78.85.19.93 host 88.80.33.234 ! object-group network OBJ_KNK_VST_KMK host 178.161.242.67 ! object-group network OBJ_IZH_KM_S61 host 84.201.247.32 host 88.80.33.194 ! object-group network OBJ_YAN_GKZ_YEL host 77.94.97.222 ! object-group network OBJ_KUN_KMK_B2 94.138.150.0 255.255.255.0 ! object-group network OBJ_KUN_KMK_H80 host 178.161.207.26 host 77.43.193.88 ! object-group network OBJ_KUN_KMK_CH9 host 178.47.128.98 host 194.150.90.20 ! object-group network OBJ_KGB_RN_KGB host 78.85.13.165 ! object-group network OBJ_NCH_RN_NCH host 78.85.13.166 ! object-group network OBJ_PRI_RN_PRI host 78.85.13.167 ! object-group network OBJ_URN_RN_URN host 78.85.20.49 ! object-group network OBJ_MZH_TK_TKM host 88.80.32.230 host 78.85.35.34 ! object-group network OBJ_GLZ_TK_TKG host 95.215.208.240 host 146.120.104.235 host 95.215.208.173 ! object-group network OBJ_IZH_TK_M21 host 84.201.242.133 ! object-group network OBJ_IZH_HLA_PP host 92.61.17.250 ! object-group network OBJ_IZH_HLA_UHK host 92.55.7.148 ! object-group network OBJ_IZH_VD_VS17 host 84.201.247.100 ! object-group network OBJ_IZH_KS_H17 85.140.32.64 255.255.255.252 host 85.140.32.63 host 85.140.32.68 ! object-group network OBJ_IZH_KI_VOR158 host 46.147.130.59 host 5.227.125.126 ! object-group network OBJ_SPB_KG_SPB host 62.141.114.190 host 94.72.27.43 ! object-group network OBJ_BRANCHES group-object OBJ_IZH_MLK_IZM group-object OBJ_IZH_KG_P11 group-object OBJ_IZH_VST_IZM group-object OBJ_IZH_TK_M44 group-object OBJ_IZH_TK_M48 group-object OBJ_IZH_TK_SMR group-object OBJ_MSK_KG_MSK group-object OBJ_GLZ_MLK_GMK group-object OBJ_KZN_MLK_KMK group-object OBJ_KEZ_MLK_KZS group-object OBJ_PRM_MLK_PHK group-object OBJ_SAR_MLK_SRM group-object OBJ_CLB_MLK_CMK group-object OBJ_BBN_RN_BBN group-object OBJ_GLZ_GKZ_GKZ group-object OBJ_KIA_RN_KIA group-object OBJ_IZH_TZK_TZK group-object OBJ_IZH_MK_VS17 group-object OBJ_IZH_KL_KLI group-object OBJ_EKB_KG_EKB group-object OBJ_IZH_KEN_VS56 group-object OBJ_IZH_VRS_IZM group-object OBJ_GLZ_VRS_UPF group-object OBJ_IZH_VRS_IPF group-object OBJ_IZH_VRS_PFV group-object OBJ_VOT_VRS_VPF group-object OBJ_MSB_TMA_MSB group-object OBJ_KIB_TMA_KIB group-object OBJ_PRM_VRS_MPF group-object OBJ_LAI_VRS_DPF group-object OBJ_BBN_VST_BBN group-object OBJ_SHM_TMA_SHM group-object OBJ_EVL_TMA_EVL group-object OBJ_ITL_VST_ITL group-object OBJ_MZH_VST_MZH group-object OBJ_KIA_VST_KIA group-object OBJ_KGB_VST_KBB group-object OBJ_SAR_VST_SMK group-object OBJ_KNK_VST_KMK group-object OBJ_IZH_KM_S61 group-object OBJ_YAN_GKZ_YEL group-object OBJ_KUN_KMK_B2 group-object OBJ_KUN_KMK_H80 group-object OBJ_KUN_KMK_CH9 group-object OBJ_KGB_RN_KGB group-object OBJ_NCH_RN_NCH group-object OBJ_PRI_RN_PRI group-object OBJ_URN_RN_URN group-object OBJ_MZH_TK_TKM group-object OBJ_GLZ_TK_TKG group-object OBJ_IZH_TK_M21 group-object OBJ_IZH_HLA_PP group-object OBJ_IZH_HLA_UHK group-object OBJ_IZH_VD_VS17 group-object OBJ_IZH_KS_H17 group-object OBJ_IZH_KI_VOR158 group-object OBJ_SPB_KG_SPB ! object-group network OBJ_NET_DMVPN host 85.140.32.27 host 78.85.13.42 host 5.227.124.143 host 84.201.247.190 host 31.173.105.66 host 78.85.13.52 host 85.140.32.30 host 31.173.105.62 host 85.140.32.29 host 46.146.210.68 host 178.47.128.18 host 31.173.105.58 host 85.140.32.28 host 212.46.204.74 host 88.80.33.162 host 87.249.237.250 host 88.80.33.42 host 87.249.239.226 ! object-group network STATIC_ISP_IP host 87.249.239.226 host 88.80.33.42 ! object-group network USER_RDP host 95.171.8.60 host 77.41.138.22 host 83.220.240.1 host 88.80.32.230 host 87.249.244.215 host 212.46.204.74 host 88.80.33.162 host 78.85.35.34 host 91.146.38.91 host 78.85.15.86 host 185.185.58.141 ! object-group network USER_VIDEO 91.240.179.0 255.255.255.0 host 88.80.33.42 host 77.41.134.173 host 78.85.34.99 host 188.94.168.214 host 84.201.252.233 host 88.80.33.162 host 212.46.204.74 ! username netadmin privilege 15 secret 5 $1$icSX$CMzAXqPuz7MpdH67Cne6r0 ! redundancy ! ! ! ! ! track 1 ip sla 1 reachability delay down 10 up 5 ! track 10 ip sla 10 reachability delay down 10 up 5 ! track 110 list boolean and object 1 object 10 ! ! policy-map PM_20MB class class-default police 20000000 ! ! crypto logging session ! crypto isakmp policy 150 encr aes authentication pre-share group 2 crypto isakmp key mlk20kom19 address 0.0.0.0 no-xauth crypto isakmp keepalive 30 crypto isakmp nat keepalive 10 ! ! crypto ipsec transform-set CRYPTO_TS_DMVPN esp-aes esp-sha-hmac mode transport ! crypto ipsec profile CRYPTO_IPSEC_DMVPN description --SPOKE_TO_SITE_DMVPN_IPSEC_GRE-- set transform-set CRYPTO_TS_DMVPN ! ! ! ! ! ! ! interface Loopback7777 description TK01000077 no ip address shutdown ! interface Tunnel1001 description --DMVPN_SPOKE_19_CLOUD_1-- bandwidth 100000 ip address 172.30.1.21 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ip mtu 1400 ip nhrp authentication M_K.Cl01 ip nhrp map 172.30.1.1 85.140.32.27 ip nhrp map 172.30.1.2 78.85.13.42 ip nhrp map multicast 85.140.32.27 ip nhrp map multicast 78.85.13.42 ip nhrp network-id 1001 ip nhrp holdtime 300 ip nhrp nhs 172.30.1.1 ip nhrp nhs 172.30.1.2 ip tcp adjust-mss 1360 tunnel source GigabitEthernet0/2 tunnel mode gre multipoint tunnel key 1001 tunnel protection ipsec profile CRYPTO_IPSEC_DMVPN shared ! interface Tunnel1002 description --DMVPN_SPOKE_19_CLOUD_2-- bandwidth 100000 ip address 172.30.2.21 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ip mtu 1400 ip nhrp authentication M_K.Cl02 ip nhrp map 172.30.2.1 5.227.124.143 ip nhrp map 172.30.2.2 78.85.13.93 ip nhrp map multicast 5.227.124.143 ip nhrp map multicast 78.85.13.93 ip nhrp network-id 1002 ip nhrp holdtime 300 ip nhrp nhs 172.30.2.1 ip nhrp nhs 172.30.2.2 ip tcp adjust-mss 1360 tunnel source GigabitEthernet0/2 tunnel mode gre multipoint tunnel key 1002 tunnel protection ipsec profile CRYPTO_IPSEC_DMVPN shared ! interface Embedded-Service-Engine0/0 no ip address shutdown ! interface GigabitEthernet0/0 description TKS LAN no ip address ip virtual-reassembly in duplex auto speed auto ! interface GigabitEthernet0/0.2 description TK-LAN-USERS-AREA encapsulation dot1Q 2 ip address 10.0.16.252 255.255.255.0 ip accounting output-packets ip flow ingress ip flow egress ip nat inside ip virtual-reassembly in standby version 2 standby 2 ip 10.0.16.250 standby 2 timers 5 15 standby 2 priority 50 standby 2 preempt delay minimum 30 standby 2 authentication ftk2018 standby 2 name VLAN2-HSRP standby 2 track 110 decrement 110 ! interface GigabitEthernet0/0.300 description TK-MGM-NETWORK-AREA encapsulation dot1Q 300 ip address 10.0.19.252 255.255.255.0 ip flow ingress ip flow egress ip nat inside ip virtual-reassembly in standby version 2 standby 300 ip 10.0.19.254 standby 300 timers 5 15 standby 300 priority 50 standby 300 preempt delay minimum 30 standby 300 authentication ftk2018 standby 300 name VLAN300-HSRP ! interface GigabitEthernet0/0.555 description --BGP_TRANSIT-- encapsulation dot1Q 555 ip address 172.30.30.121 255.255.255.248 no ip redirects no ip unreachables no ip proxy-arp ip flow ingress ip flow egress standby version 2 standby 555 ip 172.30.30.126 standby 555 timers 5 15 standby 555 priority 150 standby 555 preempt delay minimum 30 standby 555 authentication ftk2018 standby 555 name VLAN_555_HSRP standby 555 track 110 decrement 110 ! interface GigabitEthernet0/1 no ip address duplex auto speed auto ! interface GigabitEthernet0/2 description [100M] MTS ip address 88.80.33.42 255.255.255.252 ip access-group FIREWALL in ip access-group LANTOWAN out ip nat outside ip virtual-reassembly in duplex auto speed auto no cdp enable no keepalive service-policy output PM_20MB hold-queue 40 out ! ! router bgp 64522 bgp router-id 172.30.30.121 bgp log-neighbor-changes bgp graceful-restart aggregate-address 10.0.16.0 255.255.248.0 summary-only redistribute connected route-map RM_BGP_REDISTR_CON neighbor PG_BGP_OCOD peer-group neighbor PG_BGP_OCOD remote-as 64512 neighbor PG_BGP_OCOD next-hop-self all neighbor PG_BGP_OCOD soft-reconfiguration inbound neighbor PG_BGP_OCOD route-map RM_BGP_TO_HUB out neighbor PG_BGP_RCOD peer-group neighbor PG_BGP_RCOD remote-as 64513 neighbor PG_BGP_RCOD next-hop-self all neighbor PG_BGP_RCOD soft-reconfiguration inbound neighbor PG_BGP_RCOD route-map RM_BGP_TO_HUB out neighbor 172.30.1.1 peer-group PG_BGP_OCOD neighbor 172.30.1.1 route-map RM_BGP_FROM_HUB in neighbor 172.30.1.2 peer-group PG_BGP_OCOD neighbor 172.30.2.1 peer-group PG_BGP_RCOD neighbor 172.30.2.1 route-map RM_BGP_FROM_HUB in neighbor 172.30.2.2 peer-group PG_BGP_RCOD neighbor 172.30.2.2 route-map RM_BGP_FROM_HUB in neighbor 172.30.30.122 remote-as 64522 neighbor 172.30.30.122 next-hop-self all distance bgp 150 150 150 ! ip forward-protocol nd ! no ip http server ip http access-class 23 ip http authentication local no ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ip flow-export source GigabitEthernet0/0.300 ip flow-export version 5 ip flow-export destination 10.4.0.215 9995 ip flow-export destination 10.4.0.217 9995 ip flow-top-talkers top 20 sort-by bytes cache-timeout 20000 ! ip tftp source-interface GigabitEthernet0/0.300 ip dns server ip nat translation timeout 450 ip nat translation tcp-timeout 300 ip nat translation pptp-timeout 1800 ip nat translation udp-timeout 45 ip nat translation dns-timeout 5 ip nat translation port-timeout tcp 110 60 ip nat translation port-timeout tcp 25 60 ip nat translation port-timeout tcp 80 15 ip nat inside source route-map ISP_1 interface GigabitEthernet0/2 overload ip nat inside source static tcp 192.168.0.7 1433 88.80.33.42 1433 extendable ip nat inside source static tcp 10.0.16.243 3389 88.80.33.42 3389 extendable ip nat inside source static tcp 10.0.21.1 7000 88.80.33.42 7010 extendable ip nat inside source static tcp 10.0.21.1 7001 88.80.33.42 7011 extendable ip nat inside source static tcp 10.0.21.2 7010 88.80.33.42 7020 extendable ip nat inside source static tcp 10.0.21.2 7011 88.80.33.42 7021 extendable ip nat inside source static tcp 10.0.21.3 7000 88.80.33.42 7030 extendable ip nat inside source static tcp 10.0.21.3 7001 88.80.33.42 7031 extendable ip nat inside source static tcp 10.0.21.4 7000 88.80.33.42 7040 extendable ip nat inside source static tcp 10.0.21.4 7001 88.80.33.42 7041 extendable ip route 0.0.0.0 0.0.0.0 88.80.33.41 ip route 10.0.16.0 255.255.248.0 10.0.16.254 name --TK_SMIRNOVO-- ip route 192.168.0.0 255.255.255.0 10.0.16.254 name --OLD_NETS_SMIRNOVO-- ip ssh version 2 ! ip access-list extended FIREWALL permit ip object-group OBJ_BRANCHES object-group STATIC_ISP_IP permit udp host 178.45.249.116 any eq 5060 permit ip host 94.181.94.5 object-group STATIC_ISP_IP permit icmp any any permit udp any object-group STATIC_ISP_IP eq ntp permit tcp any object-group STATIC_ISP_IP eq 2109 log permit tcp object-group USER_RDP object-group STATIC_ISP_IP eq 3389 permit tcp host 95.171.8.60 object-group STATIC_ISP_IP eq 3392 permit gre host 91.240.179.254 object-group STATIC_ISP_IP permit tcp any object-group STATIC_ISP_IP eq 7010 permit tcp any object-group STATIC_ISP_IP eq 7011 permit tcp any object-group STATIC_ISP_IP eq 7020 permit tcp any object-group STATIC_ISP_IP eq 7021 permit tcp any object-group STATIC_ISP_IP eq 7030 permit tcp any object-group STATIC_ISP_IP eq 7031 permit tcp any object-group STATIC_ISP_IP eq 7040 permit tcp any object-group STATIC_ISP_IP eq 7041 permit ip 91.240.179.0 0.0.0.255 object-group STATIC_ISP_IP permit ip host 88.80.33.50 object-group STATIC_ISP_IP permit tcp host 217.118.83.184 object-group STATIC_ISP_IP eq 3389 permit tcp host 88.80.55.85 object-group STATIC_ISP_IP eq 3389 permit tcp object-group USER_VIDEO object-group STATIC_ISP_IP eq 8888 permit udp any eq 5060 object-group STATIC_ISP_IP evaluate reflectedtraffic deny ip any any ip access-list extended LANTOWAN permit ip any any reflect reflectedtraffic timeout 300 ! ! ip prefix-list PFL_BGP_REDISTR_CON seq 10 permit 10.0.0.0/16 le 24 ! ip prefix-list PFL_TO_HUB seq 10 permit 10.0.16.0/21 le 24 ip sla 1 icmp-echo 88.80.33.41 source-interface GigabitEthernet0/2 threshold 30 timeout 2000 frequency 3 ip sla schedule 1 life forever start-time now ip sla 10 icmp-echo 192.58.128.30 source-interface GigabitEthernet0/2 threshold 400 timeout 2000 frequency 3 ip sla schedule 10 life forever start-time now kron occurrence EveryDay at 1:00 recurring policy-list SaveBackup ! kron policy-list SaveBackup cli write memory ! logging trap debugging logging origin-id hostname logging facility local1 logging host 192.168.2.25 logging host 10.4.244.4 transport udp port 515 ipv6 ioam timestamp ! route-map RM_BGP_REDISTR_CON permit 10 match ip address prefix-list PFL_BGP_REDISTR_CON ! route-map ISP_1 permit 10 match ip address 1 match interface GigabitEthernet0/2 ! route-map RM_BGP_TO_HUB permit 10 match ip address prefix-list PFL_TO_HUB ! route-map RM_SELF permit 10 match ip address 99 set ip next-hop 88.80.33.41 ! route-map RM_BGP_FROM_HUB permit 10 set local-preference 1000 ! ! snmp-server community lmTUEsk6Yvlv RO snmp-server host 10.1.122.227 lmTUEsk6Yvlv snmp-server host 91.240.179.1 public access-list 1 deny 10.0.22.8 access-list 1 deny 10.0.22.4 access-list 1 deny 10.0.22.6 access-list 1 deny 10.0.16.231 access-list 1 permit 192.168.0.0 0.0.0.255 access-list 1 permit 10.0.16.0 0.0.0.255 access-list 1 permit 10.0.17.0 0.0.0.255 access-list 1 permit 10.0.19.0 0.0.0.255 access-list 1 permit 10.0.20.0 0.0.0.255 access-list 1 permit 10.0.21.0 0.0.0.255 access-list 1 permit 10.0.22.0 0.0.0.255 access-list 10 remark -==NTP SERVERS==- access-list 10 permit 91.226.136.136 access-list 10 permit 91.226.136.142 access-list 10 deny any access-list 11 remark -==NTP CLIENTS==- access-list 11 permit 10.1.3.0 0.0.0.255 access-list 11 permit 10.0.19.0 0.0.0.255 access-list 11 permit 10.0.20.0 0.0.0.255 access-list 11 permit 10.0.17.0 0.0.0.255 access-list 11 permit 10.0.22.0 0.0.0.255 access-list 99 permit 88.80.33.42 ! radius server IZH-RDS002 address ipv4 10.4.0.248 auth-port 1645 acct-port 1646 timeout 3 retransmit 2 key hykFAA@Hg9X9fsokWh5q8wez#&^a9lIizldHKxlRer3RE7AbsTsJwdB^RESF$eJ0 ! radius server P11-RDS003 address ipv4 10.1.122.248 auth-port 1645 acct-port 1646 timeout 3 retransmit 2 key hykFAA@Hg9X9fsokWh5q8wez#&^a9lIizldHKxlRer3RE7AbsTsJwdB^RESF$eJ0 ! ! ! control-plane ! ! line con 0 login authentication CONSOLE line aux 0 line 2 no activation-character no exec transport preferred none transport output pad telnet rlogin lapb-ta mop udptn v120 ssh stopbits 1 line vty 0 4 exec-timeout 120 0 logging synchronous login authentication NPS length 0 transport input ssh line vty 5 15 exec-timeout 120 0 login authentication NPS transport input ssh ! scheduler allocate 20000 1000 ntp source GigabitEthernet0/2 ntp access-group peer 10 ntp access-group serve 11 ntp master 3 ntp update-calendar ntp server 91.226.136.136 prefer ntp server 91.226.136.142 ! end