Join Telegram Study Group ▷
SPOTO is committed to all kinds of Certifications such as CCIE, CCNA, CISSP, CCNP, AWS, Huawei, especially CCIE RS, CCIE RS Lab, and CCIE DC Lab. It provides various exam questions and answers. You can download them to learn at anywhen and anywhere.
The following is a configuration on a client router that I used to maintain. This customer rented 12 IP-VPN lines. For IP-VPN internal lines, this customer is mainly used to access remote ERP systems and VOIP voice calls. The following is the complete configuration, except that the name is replaced by xxx, and everything remains unchanged. For friends who love network, technology is a rare reference for learning Cisco technology. If you are interested in this, you can analyze it.
Note: The general IP-VPN line is actually DDN and IPVPN technology, generally using the EIGRP protocol.User Access Verification
Username: xxxx01x
Password:
xxxx01-BJ-4>en
Password:
xxxx01-BJ-4#sh run
Building configuration...
Current configuration : 5624 bytes
!
! Last configuration change at 12:05:04 SHT Thu Feb 2 2006 by xxxx01user
! NVRAM config last updated at 12:05:05 SHT Thu Feb 2 2006 by xxxx01user
!
version 12.1
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
!
hostname xxxx01-BJ-4
!
logging buffered 4096 debugging
enable secret 5 $1$Tmai$BXXdfdfdfdfdf&%$$#Y4xm2uMbBBW/
enable password 7 01100B081E1D090631
!
username netuser password 7 121A0A041F041F
username netuser autocommand menu netuser
username xxxx01user password 7 070C2C400B1F1dfdfd60C07
username ispuser privilege 15 password 7 13061A1E0Adfdfd08092325
!
!
!
!
clock timezone SHT 8
ip subnet-zero
no ip finger
no ip domain-lookup
!
!
!
!
interface Loopback0
description "Loopback for Voice"
ip address 10.136.71.254 255.255.255.255
!
interface Tunnel40101
description "BJ-xxxx01 - SH-xxxx02"
ip address 172.16.255.14 255.255.255.252
tunnel source 10.136.252.50
tunnel destination 10.23.252.70
!
interface Tunnel40102
description "BJ-xxxx01 - SH-xxxx02 (Voice)"
ip address 172.16.254.14 255.255.255.252
tunnel source 10.136.71.254
tunnel destination 10.16.67.254
!
interface Tunnel40201
description "BJ-xxxx01 - SZ-xxxx02"
ip address 172.16.255.22 255.255.255.252
tunnel source 10.136.252.50
tunnel destination 10.144.253.58
!
interface Tunnel40202
description "BJ-xxxx01 - SZ-xxxx02 (Voice)"
ip address 172.16.254.22 255.255.255.252
tunnel source 10.136.71.254
tunnel destination 10.144.80.254
!
interface Tunnel40301
description "BJ-xxxx01 - SH-xxxx01"
ip address 172.16.255.6 255.255.255.252
ip mtu 1600
tunnel source 10.136.252.50
tunnel destination 10.23.252.82
!
interface Tunnel40302
description "BJ-xxxx01 - SH-xxxx01 (Voice)"
ip address 172.16.254.6 255.255.255.252
tunnel source 10.136.71.254
tunnel destination 10.16.70.254
!
interface Tunnel40501
description "To xxxx01-GZ"
ip address 172.16.255.29 255.255.255.252
ip mtu 1600
tunnel source 10.136.252.50
tunnel destination 10.144.253.78
!
interface Tunnel40502
description "To xxxx01-GZ (Voice)"
ip address 172.16.254.29 255.255.255.252
tunnel source 10.136.71.254
tunnel destination 10.144.85.254
!
interface Ethernet0
ip address 192.168.2.253 255.255.255.0
!
interface Serial0
bandwidth 256
ip address 10.136.252.50 255.255.255.252
encapsulation ppp
priority-group 1
!
router eigrp 1
redistribute static metric 100 100 255 1 1500 route-map rm_static2eigrp
network 172.16.254.0 0.0.0.255
network 172.16.255.0 0.0.0.255
network 192.168.2.0
distribute-list prefix 111 out Tunnel40101
distribute-list prefix 112 out Tunnel40102
distribute-list prefix 111 out Tunnel40201
distribute-list prefix 112 out Tunnel40202
distribute-list prefix 111 out Tunnel40301
distribute-list prefix 112 out Tunnel40302
distribute-list prefix 111 out Tunnel40501
distribute-list prefix 112 out Tunnel40502
no auto-summary
no eigrp log-neighbor-changes
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0
ip route 10.0.0.0 255.0.0.0 Serial0
ip route 10.16.67.254 255.255.255.255 Serial0
ip route 10.16.70.254 255.255.255.255 Serial0
ip route 10.23.252.70 255.255.255.255 Serial0
ip route 10.23.252.82 255.255.255.255 Serial0
ip route 10.23.253.0 255.255.255.0 Serial0
ip route 10.144.80.254 255.255.255.255 Serial0
ip route 10.144.85.254 255.255.255.255 Serial0
ip route 10.144.253.58 255.255.255.255 Serial0
ip route 10.144.253.78 255.255.255.255 Serial0
ip route 192.168.2.252 255.255.255.255 Ethernet0
ip route 192.168.4.0 255.255.255.0 192.168.2.254
ip route 192.168.5.0 255.255.255.0 192.168.2.254
ip route 192.168.30.0 255.255.255.0 192.168.2.254
ip route 192.168.31.0 255.255.255.0 192.168.2.254
no ip http server
!
!
ip prefix-list 111 description "Deny Voice"
ip prefix-list 111 seq 5 permit 0.0.0.0/0 le 31
!
ip prefix-list 112 description "Permit Voice"
ip prefix-list 112 seq 5 permit 0.0.0.0/0 ge 32
access-list 1 permit 192.168.2.252
access-list 1 permit 192.168.4.0 0.0.0.255
access-list 1 permit 192.168.5.0 0.0.0.255
access-list 1 permit 192.168.30.0 0.0.0.255
access-list 1 permit 192.168.31.0 0.0.0.255
access-list 10 permit 10.23.253.0 0.0.0.255
access-list 101 permit ip host 10.136.71.254 any
priority-list 1 protocol ip high list 101
priority-list 1 queue-limit 100 100 100 100
!
menu netuser title ^C
Testing Menu
^C
menu netuser prompt ^C
Please enter your selection : ^C
menu netuser text 1 show interface s0
menu netuser command 1 show interface s0
menu netuser options 1 pause
menu netuser text 2 show interface e0
menu netuser command 2 show interface e0
menu netuser options 2 pause
menu netuser text e exit
menu netuser command e logout
menu netuser clear-screen
menu netuser default e
menu netuser line-mode
route-map rm_static2eigrp permit 10
match ip address 1
!
snmp-server community xxxx RO 10
alias exec sion sh ip ospf nei
alias exec sbro sh run | be router ospf
alias exec sbrb sh run | be router bgp
alias exec sibs sh ip bgp su
alias exec sib sh ip bgp
alias exec sipr sh ip pim rp
alias exec siprm sh ip pim rp map
alias exec sbrr sh run | be router rip
alias exec sri sh run int
alias exec si sh run | in
alias exec sb sh run | be
alias exec siib sh ip int brief
alias exec i sh ip route
alias exec sal sh ip access-l
alias exec ct conf t
alias exec sip sh ip pro
alias exec sbre sh run | be router eigrp
alias exec sien sh ip eigrp nei
!
line con 0
exec-timeout 360 0
logging synchronous
login local
transport input none
line vty 0 4
exec-timeout 360 0
logging synchronous
login local
!
sntp server 10.23.253.254
end
xxxx01-BJ-4#
