R6#sh run Building configuration... Current configuration : 5778 bytes ! ! Last configuration change at 12:41:14 gmt+1 Fri Feb 26 2010 ! NVRAM config last updated at 01:33:58 gmt+1 Fri Feb 26 2010 ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname R6 ! boot-start-marker warm-reboot boot-end-marker ! logging message-counter syslog ! no aaa new-model memory-size iomem 15 clock timezone gmt+1 1 ! dot11 syslog ip source-route ! ! ip cef ! ! no ip domain lookup ip domain name ipexpert.com no ipv6 cef ntp server 8.9.50.2 ! multilink bundle-name authenticated ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! voice-card 0 ! ! crypto pki trustpoint CA enrollment url http://8.9.50.2:80 subject-name cn=r6.ipexpert.com, ou=CCIE, c=PL revocation-check crl match certificate CER_MAP skip revocation-check ! ! ! crypto pki certificate map CER_MAP 10 subject-name co r5.ipexpert.com ! crypto pki certificate chain CA certificate 03 30820233 3082019C A0030201 02020103 300D0609 2A864886 F70D0101 04050030 11310F30 0D060355 04030C06 494F535F 4341301E 170D3130 30323236 30363237 31375A17 0D313130 32323630 36323731 375A3056 310B3009 06035504 06130250 4C310D30 0B060355 040B1304 43434945 31183016 06035504 03130F72 362E6970 65787065 72742E63 6F6D311E 301C0609 2A864886 F70D0109 02160F52 362E6970 65787065 72742E63 6F6D305C 300D0609 2A864886 F70D0101 01050003 4B003048 02410091 4003C508 D07B0D7F 1512626E F3D72AD5 3781671C 1298C28A D7333799 11D5EBCB ED838B4F 77DE504D BECF7FF1 BE0142BD 147DBA8E 5720FACF 15E2B9E5 3199AF02 03010001 A3819930 81963047 0603551D 1F044030 3E303CA0 3AA03886 36687474 703A2F2F 382E392E 35302E32 2F636769 2D62696E 2F706B69 636C6965 6E742E65 78653F6F 70657261 74696F6E 3D476574 43524C30 0B060355 1D0F0404 030205A0 301F0603 551D2304 18301680 147E7672 E4160773 A58B5506 4B07CDDA 0C72C28B 03301D06 03551D0E 04160414 7B346B1D 329BE2C8 F3C285CD 258E1B9D F953F3B1 300D0609 2A864886 F70D0101 04050003 8181004B F7413C1D B39E5AA7 6E70B269 3BF63285 129743CD 7170581A DFA6CBF2 3E02324F 1752DF44 348502AF FA31CA8C AEDE3BE0 DE5B97BF 16730036 39BC34AA E9F8B7C0 12988FEF 7902B008 41AFB3A4 C752B8FF 678FE396 C68A3601 9AE552FD 8A5C3EE9 7DA9CF8C 968C3778 916666FB E94B096F 569DC749 F702B8B4 75B0A6E7 33FD23 quit certificate ca 01 308201FB 30820164 A0030201 02020101 300D0609 2A864886 F70D0101 04050030 11310F30 0D060355 04030C06 494F535F 4341301E 170D3130 30323236 30363130 33315A17 0D313330 32323530 36313033 315A3011 310F300D 06035504 030C0649 4F535F43 4130819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 8100CACA 4A9FE4E3 A5F36DAD 4A976ECD 1645A29F 136CE306 F98CB104 448467A7 0AE68220 0E6B2F19 DC932CE8 4809C99A B3FEE12B 13D89FF7 1F1BB5D5 9A5ED1F3 581933F5 107DF9C5 3721BCC2 8BC4A888 D481733D 8B71A871 A438406C 69A1A5F3 F8FB2649 CFCEA898 434A0CAF D0663D49 3811218C A58DBBE2 45C3BE68 AB918A2A 13CF0203 010001A3 63306130 0F060355 1D130101 FF040530 030101FF 300E0603 551D0F01 01FF0404 03020186 301F0603 551D2304 18301680 147E7672 E4160773 A58B5506 4B07CDDA 0C72C28B 03301D06 03551D0E 04160414 7E7672E4 160773A5 8B55064B 07CDDA0C 72C28B03 300D0609 2A864886 F70D0101 04050003 8181000D DE6E0703 6F921635 3DFBB36B FF14D3D5 3A0A586D E0EAC615 EBE88925 9CBE9FD3 BDF48F35 4B90A256 EA4D9CDE 720DA65B 76395C4F 8DDBC9CF F7754A1D D0A76A14 8307AD62 C48033E3 6B677AE4 90154E2F 55783EB4 9FA53EE6 588ABD73 FC670D92 96F1B0E8 F01EA635 7D337CBA 40BD9321 FFC6BE9F B70B8627 CB7FC7A2 A9A423 quit ! ! vtp domain ipexpert vtp mode transparent vtp version 2 archive log config hidekeys ! ! crypto isakmp policy 20 encr aes ! crypto isakmp policy 50 authentication pre-share crypto isakmp key cisco address 8.9.50.4 ! ! crypto ipsec transform-set SET2 esp-3des esp-md5-hmac crypto ipsec transform-set TSET-r4 esp-3des esp-md5-hmac ! crypto ipsec profile PROFILE1 set transform-set TSET-r4 ! ! crypto map MAP1 10 ipsec-isakmp set peer 8.9.50.5 set transform-set SET2 match address 120 reverse-route static ! ! ! ip ssh version 1 ! ! ! ! interface Loopback0 no ip address ! interface Loopback46 ip address 10.40.40.6 255.255.255.0 ! interface Tunnel0 ip address 172.16.46.6 255.255.255.0 ip nat outside ip virtual-reassembly tunnel source Serial0/1/0 tunnel destination 8.9.50.4 tunnel mode ipsec ipv4 tunnel protection ipsec profile PROFILE1 ! interface FastEthernet0/0 ip address 10.6.6.6 255.255.255.0 duplex auto speed auto ! interface FastEthernet0/1 ip address 10.4.4.6 255.255.255.0 ip nat inside ip virtual-reassembly duplex auto speed auto ! interface Serial0/1/0 ip address 8.9.50.6 255.255.255.0 encapsulation frame-relay ip ospf network broadcast ip ospf priority 0 frame-relay map ip 8.9.50.2 602 broadcast frame-relay map ip 8.9.50.5 605 broadcast frame-relay map ip 8.9.50.4 604 broadcast no frame-relay inverse-arp crypto map MAP1 ! interface Serial0/2/0 no ip address shutdown clock rate 2000000 ! interface Serial0/2/1 no ip address shutdown clock rate 2000000 ! router eigrp 46 passive-interface default no passive-interface Tunnel0 network 10.40.40.6 0.0.0.0 network 172.16.46.6 0.0.0.0 no auto-summary ! router ospf 1 router-id 6.6.6.6 log-adjacency-changes network 8.9.50.6 0.0.0.0 area 0 ! ip forward-protocol nd no ip http server no ip http secure-server ! ! ip nat inside source static network 10.4.4.0 10.40.40.0 /24 ! access-list 120 permit ip 10.6.6.0 0.0.0.255 10.5.5.0 0.0.0.255 ! ! ! ! ! ! control-plane ! ! ! ! mgcp fax t38 ecm mgcp behavior g729-variants static-pt ! ! ! ! ! alias exec srs show run | sect alias exec siib sh ip int brie | excl unassigned ! line con 0 exec-timeout 0 0 logging synchronous line aux 0 line vty 0 4 password cisco login ! scheduler allocate 20000 1000 end R6#