R4#sh run Building configuration... Current configuration : 6168 bytes ! ! Last configuration change at 13:33:23 GMT Fri Feb 26 2010 ! NVRAM config last updated at 07:46:51 GMT Fri Feb 26 2010 ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname R4 ! boot-start-marker warm-reboot boot-end-marker ! logging message-counter syslog ! aaa new-model ! ! aaa authentication login NO none aaa authentication login XAUTH local aaa authorization network EZ_POL local ! ! aaa session-id common memory-size iomem 15 clock timezone GMT 1 1 ! dot11 syslog ip source-route ! ! ip cef ! ! no ip domain lookup ip domain name ipexpert.com no ipv6 cef ntp server 8.9.50.2 ! multilink bundle-name authenticated ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! voice-card 0 ! ! crypto pki trustpoint CA enrollment url http://8.9.50.2:80 subject-name cn=R4.ipexpert.com revocation-check none ! ! crypto pki certificate chain CA certificate 05 30820217 30820180 A0030201 02020105 300D0609 2A864886 F70D0101 04050030 11310F30 0D060355 04030C06 494F535F 4341301E 170D3130 30323236 31323132 31305A17 0D313130 32323631 32313231 305A303A 31183016 06035504 03130F52 342E6970 65787065 72742E63 6F6D311E 301C0609 2A864886 F70D0109 02160F52 342E6970 65787065 72742E63 6F6D305C 300D0609 2A864886 F70D0101 01050003 4B003048 024100AB 1901C92C 33DD271C AB754D89 1765EA98 F2EDA1C6 F2D6B59D 0D976038 04B01650 14891A4A 9DB20304 ACE31795 491D9D4E 80074526 D2B7A704 3A52F372 67826102 03010001 A3819930 81963047 0603551D 1F044030 3E303CA0 3AA03886 36687474 703A2F2F 382E392E 35302E32 2F636769 2D62696E 2F706B69 636C6965 6E742E65 78653F6F 70657261 74696F6E 3D476574 43524C30 0B060355 1D0F0404 030205A0 301F0603 551D2304 18301680 147E7672 E4160773 A58B5506 4B07CDDA 0C72C28B 03301D06 03551D0E 04160414 FBCA3D33 D44610A2 AE6E0257 5205766E C8F4859D 300D0609 2A864886 F70D0101 04050003 818100A7 96117A72 7D65F863 A8A438BC D580DC9E 7DF5CD82 05BED15D EE03CAFA 7B5B8E1D FB8831F1 EE224C7F 93589CF3 7EA66F5E 238FAE22 FA61B1E0 0DE077CD 5A6C0C90 89BA5EEC FA0069A1 F06B51E2 A0464324 88235C58 BFFA0633 BC9FCF07 0BCCAEB8 4DD0EA5E 2575A858 1BFDD925 340ABC9D 37AA1726 C15CA25C ABE75AF1 53DFB6 quit certificate ca 01 308201FB 30820164 A0030201 02020101 300D0609 2A864886 F70D0101 04050030 11310F30 0D060355 04030C06 494F535F 4341301E 170D3130 30323236 30363130 33315A17 0D313330 32323530 36313033 315A3011 310F300D 06035504 030C0649 4F535F43 4130819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 8100CACA 4A9FE4E3 A5F36DAD 4A976ECD 1645A29F 136CE306 F98CB104 448467A7 0AE68220 0E6B2F19 DC932CE8 4809C99A B3FEE12B 13D89FF7 1F1BB5D5 9A5ED1F3 581933F5 107DF9C5 3721BCC2 8BC4A888 D481733D 8B71A871 A438406C 69A1A5F3 F8FB2649 CFCEA898 434A0CAF D0663D49 3811218C A58DBBE2 45C3BE68 AB918A2A 13CF0203 010001A3 63306130 0F060355 1D130101 FF040530 030101FF 300E0603 551D0F01 01FF0404 03020186 301F0603 551D2304 18301680 147E7672 E4160773 A58B5506 4B07CDDA 0C72C28B 03301D06 03551D0E 04160414 7E7672E4 160773A5 8B55064B 07CDDA0C 72C28B03 300D0609 2A864886 F70D0101 04050003 8181000D DE6E0703 6F921635 3DFBB36B FF14D3D5 3A0A586D E0EAC615 EBE88925 9CBE9FD3 BDF48F35 4B90A256 EA4D9CDE 720DA65B 76395C4F 8DDBC9CF F7754A1D D0A76A14 8307AD62 C48033E3 6B677AE4 90154E2F 55783EB4 9FA53EE6 588ABD73 FC670D92 96F1B0E8 F01EA635 7D337CBA 40BD9321 FFC6BE9F B70B8627 CB7FC7A2 A9A423 quit ! ! vtp version 2 username ipexpert password 0 ipexpert archive log config hidekeys ! ! crypto isakmp policy 10 encr aes group 5 ! crypto isakmp policy 50 authentication pre-share ! crypto isakmp policy 60 encr 3des hash md5 group 2 crypto isakmp key cisco address 8.9.50.6 crypto isakmp identity dn ! crypto isakmp client configuration group CCIE pool EZPOOL acl 170 crypto isakmp profile ISAPROF_EZVPN match identity group CCIE client authentication list XAUTH isakmp authorization list EZ_POL client configuration address respond virtual-template 2 ! ! crypto ipsec transform-set TSET-r6 esp-3des esp-md5-hmac crypto ipsec transform-set SET6 esp-3des esp-md5-hmac ! crypto ipsec profile IPSEC_PROF6 set transform-set SET6 set reverse-route distance 15 set isakmp-profile ISAPROF_EZVPN ! crypto ipsec profile PROFILE1 set transform-set TSET-r6 ! ! ! ! ip ssh version 1 ! ! ! ! interface Loopback0 no ip address ! interface Loopback44 ip address 10.44.44.4 255.255.255.0 ! interface Tunnel0 ip address 172.16.46.4 255.255.255.0 ip nat outside ip virtual-reassembly tunnel source Serial0/0/0 tunnel destination 8.9.50.6 tunnel mode ipsec ipv4 tunnel protection ipsec profile PROFILE1 ! interface FastEthernet0/0 no ip address shutdown duplex auto speed auto ! interface FastEthernet0/1 ip address 10.4.4.4 255.255.255.0 ip nat inside ip virtual-reassembly duplex auto speed auto ! interface Serial0/0/0 ip address 8.9.50.4 255.255.255.0 encapsulation frame-relay ip ospf network broadcast ip ospf priority 0 frame-relay map ip 8.9.50.2 402 broadcast frame-relay map ip 8.9.50.5 405 broadcast frame-relay map ip 8.9.50.6 406 broadcast no frame-relay inverse-arp ! interface Virtual-Template2 type tunnel ip unnumbered Serial0/0/0 tunnel mode ipsec ipv4 tunnel protection ipsec profile IPSEC_PROF6 ! router eigrp 46 passive-interface default no passive-interface Tunnel0 network 10.44.44.4 0.0.0.0 network 172.16.46.4 0.0.0.0 no auto-summary ! router ospf 1 router-id 4.4.4.4 log-adjacency-changes network 8.9.50.4 0.0.0.0 area 0 ! router rip version 2 redistribute static network 10.0.0.0 no auto-summary ! ip local pool EZPOOL 8.9.100.1 8.9.100.254 ip forward-protocol nd no ip http server no ip http secure-server ! ! ip nat inside source static network 10.4.4.0 10.44.44.0 /24 ! access-list 170 permit ip 10.4.4.0 0.0.0.255 any ! ! ! ! ! ! control-plane ! ! ! ! mgcp fax t38 ecm mgcp behavior g729-variants static-pt ! ! ! ! ! alias exec srs show run | sect alias exec siib sh ip int brie | excl unassigned ! line con 0 exec-timeout 0 0 logging synchronous login authentication NO line aux 0 line vty 0 4 password cisco ! scheduler allocate 20000 1000 end R4#