Xpresslearn Forums: Recent Posts

Xpresslearn Forums: Recent Posts http://www.xpresslearn.com/forums/ Learn networking solutions in 5 minutes or less en Wed, 07 Jan 2009 11:14:16 +0000 admin on "3750 - Stacked" http://www.xpresslearn.com/forums/topic.php?id=10#post-10 Mon, 25 Aug 2008 14:59:48 +0000 admin 10@http://www.xpresslearn.com/forums/ Hardware: cisco WS-C3750G-48TS (PowerPC405) processor with 118784K/12280K bytes of memory. 2 Virtual Ethernet interfaces 104 Gigabit Ethernet interfaces Configuration: <pre><code>Current configuration : 29719 bytes ! version 12.2 service nagle no service pad service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption service internal service sequence-numbers no service dhcp ! hostname 3750-ASW-01 ! logging buffered 51200 debugging enable secret 5 $1$l$1$1$1 ! username ***** privilege 15 secret 5 $1$l$1$1$1 aaa new-model aaa authentication login default group tacacs+ local enable aaa authorization exec default group tacacs+ local aaa accounting send stop-record authentication failure aaa accounting update newinfo aaa accounting exec default start-stop group tacacs+ aaa accounting commands 1 default stop-only group tacacs+ aaa accounting commands 15 default stop-only group tacacs+ aaa accounting network default start-stop group tacacs+ aaa accounting system default start-stop group tacacs+ ! aaa session-id common clock timezone CST -5 clock summer-time CDT recurring switch 1 provision ws-c3750g-48ts switch 2 provision ws-c3750g-48ts system mtu routing 1500 vtp mode transparent udld aggressive udld message time 90 ip subnet-zero no ip domain-lookup ip domain-name envoy.net ip name-server 10.1.1.10 ip name-server 10.1.1.20 ip name-server 10.10.1.10 ip name-server 10.10.1.20 ! ! mls qos ! ! ! macro name sysback # Configure Private VLAN for System Backup # Usage: macro apply sysback $desc "sys-name nic-name" description $desc switchport private-vlan host-association 123 321 switchport mode private-vlan host # Configure portfast spanning-tree portfast # Speed and Duplex speed 1000 duplex full no cdp enable no shutdown no macro description @ macro name oob # Configure Out of Band interface # Usage: macro apply oob $desc "sys-name OOB" description $desc switchport access vlan 104 switchport mode access # Configure portfast spanning-tree portfast # Speed and Duplex speed 100 duplex full no shutdown # Port security switchport port-security maximum 3 switchport port-security switchport port-security aging time 3 switchport port-security violation restrict switchport port-security aging type inactivity no cdp enable no macro description @ macro name winserver # Configure Server interface # Usage: macro apply winserver $vlan # $desc "sys-name nic-name" description $desc switchport access vlan $vlan switchport mode access # Configure portfast spanning-tree portfast # Speed and Duplex speed auto duplex auto no shutdown # Port security switchport port-security maximum 3 switchport port-security switchport port-security aging time 3 switchport port-security violation restrict switchport port-security aging type inactivity no cdp enable no macro description @ macro name unixserver # Configure Server interface # Usage: macro apply unixserver $vlan # $desc "sys-name nic-name" description $desc switchport access vlan $vlan switchport mode access # Configure portfast spanning-tree portfast # Speed and Duplex speed 1000 duplex full no shutdown # Port security switchport port-security maximum 3 switchport port-security switchport port-security aging time 3 switchport port-security violation restrict switchport port-security aging type inactivity no cdp enable no macro description @ macro name portniu # Unassign a switch port # Usage: macro apply portniu shutdown description NIU no switchport switchport no spanning-tree portfast speed auto duplex auto no macro description @ ! port-channel load-balance src-dst-ip no file verify auto ! spanning-tree mode rapid-pvst spanning-tree logging spanning-tree portfast bpduguard default spanning-tree extend system-id spanning-tree uplinkfast spanning-tree pathcost method long spanning-tree vlan 1-4094 priority 61440 ! vlan internal allocation policy ascending ! vlan 2 name SWITCH-MGMT ! vlan 104 name P-10.1.104.0_23b-oob ! vlan 123 name P-10.1.123-PVLAN-Primary private-vlan primary private-vlan association 321 ! vlan 257 name P-Trunk-Native ! vlan 321 name P-10.1.123.0_22b-SysBackup private-vlan isolated ! vlan 513 name P-RSPAN_513 remote-span ! interface Port-channel1 description Distribution1 switchport trunk encapsulation dot1q switchport trunk native vlan 257 switchport trunk allowed vlan 2,104,123,257,321,513 switchport mode trunk switchport nonegotiate ! interface Port-channel2 description Distribution2 switchport trunk encapsulation dot1q switchport trunk native vlan 257 switchport trunk allowed vlan 2,104,123,257,321,513 switchport mode trunk switchport nonegotiate ! interface GigabitEthernet1/0/1 description not in use shutdown ! interface GigabitEthernet1/0/2 description not in use shutdown ! interface GigabitEthernet1/0/3 description not in use shutdown ! interface GigabitEthernet1/0/4 description not in use shutdown ! interface GigabitEthernet1/0/5 description not in use shutdown ! interface GigabitEthernet1/0/6 description not in use shutdown ! interface GigabitEthernet1/0/7 description not in use shutdown ! interface GigabitEthernet1/0/8 description not in use shutdown ! interface GigabitEthernet1/0/9 description not in use shutdown ! interface GigabitEthernet1/0/10 description not in use shutdown ! interface GigabitEthernet1/0/11 description not in use shutdown ! interface GigabitEthernet1/0/12 description not in use shutdown ! interface GigabitEthernet1/0/13 description not in use shutdown ! interface GigabitEthernet1/0/14 description not in use shutdown ! interface GigabitEthernet1/0/15 description not in use shutdown ! interface GigabitEthernet1/0/16 description not in use shutdown ! interface GigabitEthernet1/0/17 description not in use shutdown ! interface GigabitEthernet1/0/18 description not in use shutdown ! interface GigabitEthernet1/0/19 description not in use shutdown ! interface GigabitEthernet1/0/20 description not in use shutdown ! interface GigabitEthernet1/0/21 description not in use shutdown ! interface GigabitEthernet1/0/22 description not in use shutdown ! interface GigabitEthernet1/0/23 description not in use shutdown ! interface GigabitEthernet1/0/24 description not in use shutdown ! interface GigabitEthernet1/0/25 description not in use shutdown ! interface GigabitEthernet1/0/26 description not in use shutdown ! interface GigabitEthernet1/0/27 description not in use shutdown ! interface GigabitEthernet1/0/28 description not in use shutdown ! interface GigabitEthernet1/0/29 description not in use shutdown ! interface GigabitEthernet1/0/30 description not in use shutdown ! interface GigabitEthernet1/0/31 description not in use shutdown ! interface GigabitEthernet1/0/32 description not in use shutdown ! interface GigabitEthernet1/0/33 description not in use shutdown ! interface GigabitEthernet1/0/34 description not in use shutdown ! interface GigabitEthernet1/0/35 description not in use shutdown ! interface GigabitEthernet1/0/36 description not in use shutdown ! interface GigabitEthernet1/0/37 description not in use shutdown ! interface GigabitEthernet1/0/38 description not in use shutdown ! interface GigabitEthernet1/0/39 description not in use shutdown ! interface GigabitEthernet1/0/40 description not in use shutdown ! interface GigabitEthernet1/0/41 description not in use shutdown ! interface GigabitEthernet1/0/42 description not in use shutdown ! interface GigabitEthernet1/0/43 description not in use shutdown ! interface GigabitEthernet1/0/44 description not in use shutdown ! interface GigabitEthernet1/0/45 description not in use shutdown ! interface GigabitEthernet1/0/46 description not in use shutdown ! interface GigabitEthernet1/0/47 description not in use shutdown ! interface GigabitEthernet1/0/48 description not in use shutdown ! interface GigabitEthernet1/0/49 description Distribution1 GXX/XXXXXX switchport trunk encapsulation dot1q switchport trunk native vlan 257 switchport trunk allowed vlan 2,104,123,257,321,513 switchport mode trunk switchport nonegotiate mls qos trust dscp channel-group 1 mode active ! interface GigabitEthernet1/0/50 description Distribution2 GXX/XXXXXX switchport trunk encapsulation dot1q switchport trunk native vlan 257 switchport trunk allowed vlan 2,104,123,257,321,513 switchport mode trunk switchport nonegotiate mls qos trust dscp channel-group 2 mode active ! interface GigabitEthernet1/0/51 description not in use shutdown ! interface GigabitEthernet1/0/52 description not in use shutdown ! interface GigabitEthernet2/0/1 description not in use shutdown ! interface GigabitEthernet2/0/2 description not in use shutdown ! interface GigabitEthernet2/0/3 description not in use shutdown ! interface GigabitEthernet2/0/4 description not in use shutdown ! interface GigabitEthernet2/0/5 description not in use shutdown ! interface GigabitEthernet2/0/6 description not in use shutdown ! interface GigabitEthernet2/0/7 description not in use shutdown ! interface GigabitEthernet2/0/8 description not in use shutdown ! interface GigabitEthernet2/0/9 description not in use shutdown ! interface GigabitEthernet2/0/10 description not in use shutdown ! interface GigabitEthernet2/0/11 description not in use shutdown ! interface GigabitEthernet2/0/12 description not in use shutdown ! interface GigabitEthernet2/0/13 description not in use shutdown ! interface GigabitEthernet2/0/14 description not in use shutdown ! interface GigabitEthernet2/0/15 description not in use shutdown ! interface GigabitEthernet2/0/16 description not in use shutdown ! interface GigabitEthernet2/0/17 description not in use shutdown ! interface GigabitEthernet2/0/18 description NIU shutdown ! interface GigabitEthernet2/0/19 description not in use shutdown ! interface GigabitEthernet2/0/20 description not in use shutdown ! interface GigabitEthernet2/0/21 description not in use shutdown ! interface GigabitEthernet2/0/22 description not in use shutdown ! interface GigabitEthernet2/0/23 description not in use shutdown ! interface GigabitEthernet2/0/24 description not in use shutdown ! interface GigabitEthernet2/0/25 description not in use shutdown ! interface GigabitEthernet2/0/26 description not in use shutdown ! interface GigabitEthernet2/0/27 description not in use shutdown ! interface GigabitEthernet2/0/28 description not in use shutdown ! interface GigabitEthernet2/0/29 description not in use shutdown ! interface GigabitEthernet2/0/30 description not in use shutdown ! interface GigabitEthernet2/0/31 description not in use shutdown ! interface GigabitEthernet2/0/32 description not in use shutdown ! interface GigabitEthernet2/0/33 description not in use shutdown ! interface GigabitEthernet2/0/34 description not in use shutdown ! interface GigabitEthernet2/0/35 description not in use shutdown ! interface GigabitEthernet2/0/36 description not in use shutdown ! interface GigabitEthernet2/0/37 description not in use shutdown ! interface GigabitEthernet2/0/38 description not in use shutdown ! interface GigabitEthernet2/0/39 description NIU shutdown ! interface GigabitEthernet2/0/40 description NIU shutdown ! interface GigabitEthernet2/0/41 description not in use shutdown ! interface GigabitEthernet2/0/42 description not in use shutdown ! interface GigabitEthernet2/0/43 description not in use shutdown ! interface GigabitEthernet2/0/44 description not in use shutdown ! interface GigabitEthernet2/0/45 description not in use shutdown ! interface GigabitEthernet2/0/46 description not in use shutdown ! interface GigabitEthernet2/0/47 description not in use shutdown ! interface GigabitEthernet2/0/48 description not in use shutdown ! interface GigabitEthernet2/0/49 description Distribution1 GXX/XXXXXX switchport trunk encapsulation dot1q switchport trunk native vlan 257 switchport trunk allowed vlan 2,104,123,257,321,513 switchport mode trunk switchport nonegotiate mls qos trust dscp channel-group 1 mode active ! interface GigabitEthernet2/0/50 description Distribution2 GXX/XXXXXX switchport trunk encapsulation dot1q switchport trunk native vlan 257 switchport trunk allowed vlan 2,104,123,257,321,513 switchport mode trunk switchport nonegotiate mls qos trust dscp channel-group 2 mode active ! interface GigabitEthernet2/0/51 ! interface GigabitEthernet2/0/52 ! interface Vlan1 no ip address shutdown ! interface Vlan2 ip address 10.1.1.41 255.255.255.0 ! ip default-gateway 10.1.1.1 ip classless no ip http server no ip http secure-server ! logging 10.1.19.85 logging 10.1.20.21 snmp-server community **** RO snmp-server community ***** RW snmp-server trap-source Vlan2 snmp-server contact <a href="mailto:email@company.com">email@company.com</a> snmp-server enable traps snmp authentication coldstart snmp-server enable traps cluster snmp-server enable traps entity snmp-server enable traps vtp snmp-server enable traps license snmp-server enable traps config snmp-server enable traps hsrp snmp-server enable traps stpx root-inconsistency loop-inconsistency snmp-server enable traps vlan-membership snmp-server host 10.1.20.21 **** snmp-server host 10.1.20.21 version 2c **** tacacs-server host 10.1.19.25 tacacs-server host 10.1.20.25 tacacs-server timeout 3 tacacs-server directed-request tacacs-server key 7 **** radius-server source-ports 1645-1646 ! control-plane ! banner exec ^CC ********************************************************************** Your Banner Here ********************************************************************** ^C banner login ^CC ********************************************************************** Your Banner Here ********************************************************************** ^C ! line con 0 exec-timeout 15 0 line vty 0 4 session-timeout 3000 exec-timeout 15 0 transport input ssh line vty 5 15 session-timeout 3000 exec-timeout 15 0 transport input ssh ! no scheduler max-sched-time ntp clock-period 36029219 ntp server 10.1.19.32 ntp server 10.1.19.33 ntp server 10.14.19.32 ntp server 10.1.19.33 end</code></pre> admin on "827 - ISP Configuration" http://www.xpresslearn.com/forums/topic.php?id=9#post-9 Mon, 25 Aug 2008 03:05:14 +0000 admin 9@http://www.xpresslearn.com/forums/ Hardware: Cisco827-V4 Configuration: <code> version 12.2 no parser cache no service single-slot-reload-enable no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname Router ! logging rate-limit console 10 except errors enable password ! mmi polling-interval 60 no mmi auto-configure no mmi pvc mmi snmp-timeout 180 no ip subnet-zero ! no ip dhcp-client network-discovery vpdn enable ! vpdn-group pppoe request-dialin protocol pppoe ! ! ! ! interface Ethernet0 ip address xxx.xxx.xxx.xxx 255.255.255.xxx ip tcp adjust-mss 1450 no cdp enable ! interface ATM0 no ip address no atm ilmi-keepalive bundle-enable dsl operating-mode auto ! interface ATM0.1 point-to-point pvc 0/35 pppoe-client dial-pool-number 1 ! ! interface Dialer1 ip unnumbered Ethernet0 ip mtu 1492 encapsulation ppp dialer pool 1 dialer-group 1 no cdp enable ppp chap hostname ppp chap password ppp pap sent-username ! ip classless ip route 0.0.0.0 0.0.0.0 Dialer1 no ip http server ! dialer-list 1 protocol ip permit no cdp run ! line con 0 stopbits 1 line vty 0 4 password login ! scheduler max-task-time 5000 end </code> admin on "1720 - Filtering" http://www.xpresslearn.com/forums/topic.php?id=8#post-8 Mon, 25 Aug 2008 02:58:52 +0000 admin 8@http://www.xpresslearn.com/forums/ Hardware: Cisco 1720 Configuration: <pre><code>version 12.1 no service single-slot-reload-enable service timestamps debug uptime service timestamps log uptime no logging buffered memory-size iomem 25 enable secret 5 $1$1$1 ! hostname inside-filter ! ! ip audit notify log ip audit po max-events 100 no ip finger no ip domain-lookup no ip http server ip subnet-zero ip classless ! ! !DMZ interface interface FastEthernet0 ip address 10.10.10.2 255.255.255.0 ip access-group 101 in ! !LAN interface interface Ethernet0 ip address 172.17.0.1 255.255.0.0 ip access-group 111 in ! ! !Default route to inside (DMZ) interface !of outside filter router ip route 0.0.0.0 0.0.0.0 10.10.10.1 ! ! !Allow INbound responses from Internet DNS server access-list 101 permit udp host 216.93.82.5 172.17.0.0 0.0.255.255 !Allow INbound responses from connection-oriented (TCP) requests access-list 101 permit tcp any 172.17.0.0 0.0.255.255 established ! !Allow OUTbound requests to DNS, Web and SSL, !Mail (both SMTP and POP), and FTP (both control and data) access-list 111 permit udp 172.17.0.0 0.0.255.255 any eq 53 access-list 111 permit tcp 172.17.0.0 0.0.255.255 any eq 80 access-list 111 permit tcp 172.17.0.0 0.0.255.255 any eq 443 access-list 111 permit tcp 172.17.0.0 0.0.255.255 any eq 25 access-list 111 permit tcp 172.17.0.0 0.0.255.255 any eq 110 access-list 111 permit tcp 172.17.0.0 0.0.255.255 any eq 21 access-list 111 permit tcp 172.17.0.0 0.0.255.255 any eq 20 ! ! line con 0 exec-timeout 30 0 transport input none line aux 0 line vty 0 4 login password **** ! no scheduler allocate end</code></pre> admin on "Disclaimer" http://www.xpresslearn.com/forums/topic.php?id=7#post-7 Mon, 25 Aug 2008 02:39:08 +0000 admin 7@http://www.xpresslearn.com/forums/ Device configurations posted in the forums on this site may have been found in various places on the Internet. The intention of these forums are for 'learning through example' purposes only. admin on "Configuration Posting Template" http://www.xpresslearn.com/forums/topic.php?id=6#post-6 Mon, 25 Aug 2008 02:34:08 +0000 admin 6@http://www.xpresslearn.com/forums/ <code> Hardware: (Hardware block of show ver) Configuration: (Output of show run) </code> admin on "2811 - VOIP" http://www.xpresslearn.com/forums/topic.php?id=5#post-5 Mon, 25 Aug 2008 02:20:47 +0000 admin 5@http://www.xpresslearn.com/forums/ Hardware: Cisco 2811 Configuration: <code> Version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname NP/RL-RTR ! boot-start-marker boot-end-marker ! card type t1 0 0 logging buffered 4096 debugging enable secret 5 ******************************* ! no aaa new-model no network-clock-participate wic 0 ! ! ip cef ! ! ip name-server 63.216.0.5 ip name-server 63.216.0.6 ! voice-card 0 no dspfarm ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! controller T1 0/0/0 framing esf linecode b8zs channel-group 0 timeslots 1-24 ! class-map match-all L3-to-L2_VoIP-Cntrl match ip dscp af31 class-map match-all L3-to-L2_VoIP-RTP match ip dscp ef class-map match-all voice-signaling match ip dscp af31 class-map match-all sip-in match access-group 186 class-map match-all voice match ip dscp ef ! ! policy-map BTNA_Out class voice priority 1024 class voice-signaling bandwidth 128 class class-default fair-queue random-detect policy-map output_L3-to-L2 class L3-to-L2_VoIP-RTP set cos 5 class L3-to-L2_VoIP-Cntrl set cos 3 policy-map BTNA_In class voice priority 3000 class sip-in bandwidth 1024 class class-default fair-queue random-detect ! ! ! ! interface FastEthernet0/0 ip address 65.72.48.130 255.255.255.128 duplex auto speed auto ! interface FastEthernet0/1 ip address 67.100.113.229 255.255.255.0 ip nat enable duplex auto speed auto ! interface Serial0/0/0:0 description To PCCWGlobal var02.sjo01:Serial2/0/4:0 // 86HCGS664404PT // NAT021-22776-I3E ip unnumbered FastEthernet0/0 no fair-queue ! ip route 0.0.0.0 0.0.0.0 Serial0/0/0:0 ! ! no ip http server no ip http secure-server ! ip access-list extended infilter remark anti-spoofing and block other nasties deny icmp any any redirect deny icmp any any source-quench deny ip 127.0.0.0 0.255.255.255 any deny ip 224.0.0.0 31.255.255.255 any deny ip 10.0.0.0 0.255.255.255 any permit ip 192.168.254.0 0.0.0.255 any permit ip 192.168.255.0 0.0.0.255 any permit ip 63.121.107.0 0.0.0.255 any deny ip 192.168.0.0 0.0.255.255 any evaluate my-packets remark anti-spoofing and block other nasties ip access-list extended outfilter remark punch return holes for outgoing tcp and udp permit tcp any any reflect my-packets permit udp any any reflect my-packets remark but allow anything at all out permit ip any any remark punch return holes for outgoing tcp and udp remark but allow anything at all out ! access-list 10 permit 12.32.13.128 0.0.0.13 access-list 20 permit 192.168.11.0 0.0.0.255 access-list 60 permit 209.8.25.32 0.0.0.15 access-list 101 permit ip any any precedence critical tos 12 access-list 102 deny tcp any eq ftp-data any access-list 102 deny tcp any any eq ftp-data access-list 102 permit ip any any access-list 103 permit ip any any access-list 110 permit ip 63.121.0.0 0.0.255.255 any access-list 110 deny ip any any access-list 186 permit ip 206.161.122.0 0.0.0.255 any access-list 186 permit ip host 63.216.0.172 any access-list 186 permit ip host 63.216.0.170 any priority-list 1 protocol ip high list 101 priority-list 1 protocol ip normal list 102 priority-list 1 protocol ip low list 103 priority-list 1 queue-limit 100 40 60 80 snmp-server community **** RO 60 snmp-server enable traps tty ! ! ! control-plane ! ! ! ! ! ! ! ! ! line con 0 password **** line aux 0 password ***** line vty 0 4 password ***** no login ! scheduler allocate 20000 1000 ntp clock-period 17180009 ntp server 1.1.4.100 ! end </code> admin on "2821 - RSVP" http://www.xpresslearn.com/forums/topic.php?id=4#post-4 Mon, 25 Aug 2008 02:13:26 +0000 admin 4@http://www.xpresslearn.com/forums/ Hardware: Cisco 2821 (revision 53.51) with 251904K/10240K bytes of memory. 2 Gigabit Ethernet interfaces 4 Serial interfaces 1 Channelized E1/PRI port 2 Voice FXS interfaces 62720K bytes of ATA CompactFlash (Read/Write) Configuration: <code> ! version 12.3 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname R4_Site1_Zone2 ! boot-start-marker boot system flash c2800nm-ipvoice_ivs-mz.123-14.T7.bin boot-end-marker ! logging buffered 51200 warnings ! no aaa new-model ! resource policy ! network-clock-participate wic 1 network-clock-select 1 E1 0/1/0 ip subnet-zero ! ! ip cef no ip dhcp use vrf connected ! ! no ip domain lookup ip domain name yourdomain.com no ftp-server write-enable isdn switch-type primary-qsig ! voice-card 0 codec complexity medium no dspfarm ! ! ! ! ! ! ! ! ! ! ! ! username cisco privilege 15 secret 5 <removed> ! ! controller E1 0/1/0 framing NO-CRC4 pri-group timeslots 1-3,16 ! ! ! interface Loopback0 ip address 172.16.0.2 255.255.0.0 h323-gateway voip interface h323-gateway voip id GK-zone2 ipaddr 172.16.0.2 1719 h323-gateway voip h323-id GW-zone2-1 h323-gateway voip tech-prefix 1# h323-gateway voip bind srcaddr 172.16.0.2 ip rsvp bandwidth ip rsvp flow-assist ip rsvp resource-provider wfq pvc ! interface GigabitEthernet0/0 description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$ ip address 192.168.1.2 255.255.255.0 duplex auto speed auto fair-queue 64 256 1 ip rsvp bandwidth 20 20 ! interface GigabitEthernet0/1 no ip address duplex auto speed auto ! interface Serial0/1/0:15 no ip address isdn switch-type primary-qsig isdn incoming-voice voice no fair-queue no cdp enable ! router ospf 113 log-adjacency-changes network 172.16.0.0 0.0.255.255 area 1 network 192.168.1.0 0.0.0.255 area 1 ! ip classless ! ip http server ip http access-class 23 ip http authentication local ip http timeout-policy idle 60 life 86400 requests 10000 ! ! ! ! control-plane ! no call rsvp-sync ! ! voice-port 0/0/0 cptone FR timeouts interdigit 5 ! voice-port 0/0/1 cptone FR timeouts interdigit 5 ! voice-port 0/1/0:15 cptone FR timeouts interdigit 5 ! ! ! ! ! dial-peer voice 1 pots destination-pattern 2[0-8] direct-inward-dial port 0/1/0:15 forward-digits all ! dial-peer voice 100 voip destination-pattern .T modem passthrough nse codec g711alaw session target ras dtmf-relay cisco-rtp h245-signal req-qos guaranteed-delay codec g729r8 bytes 40 fax nsf 000000 no vad ! gateway timer receive-rtp 1200 ! ! gatekeeper zone local GK-zone2 zone2.test.com 172.16.0.2 zone remote GK-zone1 zone1.test.com 192.168.2.193 1719 zone prefix GK-zone1 1. zone prefix GK-zone2 2. gw-priority 10 GW-zone2-1 zone prefix GK-zone2 3. gw-priority 10 GW-zone2-2 gw-type-prefix 1#* default-technology no shutdown ! banner login ^C ----------------------------------------------------------------------- Cisco Router and Security Device Manager (SDM) is installed on this device. This feature requires the one-time use of the username "cisco" with the password "cisco". The default username and password have a privilege level of 15. Please change these publicly known initial credentials using SDM or the IOS CLI. Here are the Cisco IOS commands. username <myuser> privilege 15 secret 0 <mypassword> no username cisco Replace <myuser> and <mypassword> with the username and password you want to use. For more information about SDM please follow the instructions in the QUICK START GUIDE for your router or go to <a href="http://www.cisco.com/go/sdm" rel="nofollow">http://www.cisco.com/go/sdm</a> ----------------------------------------------------------------------- ^C ! line con 0 login local line aux 0 line vty 0 4 access-class 23 in privilege level 15 login local line vty 5 15 access-class 23 in privilege level 15 login local ! scheduler allocate 20000 1000 ! end </code> admin on "2801 - RSVP" http://www.xpresslearn.com/forums/topic.php?id=3#post-3 Mon, 25 Aug 2008 02:05:06 +0000 admin 3@http://www.xpresslearn.com/forums/ Hardware: Cisco 2801 (revision 5.0) with 116736K/14336K bytes of memory. 2 FastEthernet interfaces 2 Serial(sync/async) interfaces 62592K bytes of ATA CompactFlash (Read/Write) Configuration: <pre><code>Current configuration : 2547 bytes ! version 12.3 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname R2_Zone1 ! boot-start-marker boot-end-marker ! ! no aaa new-model ! resource policy ! mmi polling-interval 60 no mmi auto-configure no mmi pvc mmi snmp-timeout 180 ip subnet-zero ip cef ! ! no ip dhcp use vrf connected ! ! no ip domain lookup no ftp-server write-enable ! ! ! ! ! ! ! ! ! ! ! ! ! ! username <removed> password 0 <removed> ! ! class-map match-any gold match dscp af31 match access-group 101 class-map match-any voice match dscp ef ! ! policy-map qos2 class voice priority 200 class gold bandwidth 150 class class-default fair-queue policy-map qos class voice priority 200 class gold bandwidth 150 class class-default fair-queue ! ! ! ! interface FastEthernet0/0 ip address 192.168.0.2 255.255.255.0 duplex auto speed auto fair-queue 64 256 1 ip rsvp bandwidth 20 20 ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface Serial0/1/0 bandwidth 512 no ip address encapsulation frame-relay load-interval 30 no keepalive no fair-queue frame-relay traffic-shaping frame-relay ip rtp header-compression ip rsvp bandwidth ! interface Serial0/1/0.1 point-to-point ip address 10.0.0.1 255.255.255.192 ip ospf network point-to-point frame-relay interface-dlci 17 class to-site1 frame-relay ip rtp header-compression ip rsvp bandwidth ip rsvp data-packet classification none ip rsvp resource-provider none ! interface Serial0/2/0 bandwidth 2000000 ip address 10.0.0.193 255.255.255.192 encapsulation frame-relay ip ospf network point-to-point shutdown no keepalive no fair-queue clockrate 2000000 frame-relay traffic-shaping frame-relay interface-dlci 16 class to-site2 ! router ospf 113 log-adjacency-changes network 10.0.0.0 0.0.0.63 area 1 network 10.0.0.192 0.0.0.63 area 1 network 192.168.0.0 0.0.0.255 area 0 ! ip classless ! ! ip http server no ip http secure-server ! ! map-class frame-relay to-site1 frame-relay cir 512000 frame-relay bc 51200 frame-relay be 0 frame-relay mincir 512000 frame-relay adaptive-shaping becn service-policy output qos ! map-class frame-relay to-site2 frame-relay cir 2000000 frame-relay bc 200000 frame-relay be 0 frame-relay mincir 2000000 service-policy output qos2 access-list 101 permit udp any any eq 1200 ! ! ! control-plane ! ! ! ! ! ! ! ! line con 0 password <removed> line aux 0 line vty 0 4 password <removed> absolute-timeout 1000 login local ! end</code></pre> admin on "2811 - RSVP" http://www.xpresslearn.com/forums/topic.php?id=2#post-2 Mon, 25 Aug 2008 01:59:23 +0000 admin 2@http://www.xpresslearn.com/forums/ Hardware: Cisco 2811 (revision 53.51) with 251904K/10240K bytes of memory. 2 FastEthernet interfaces 4 Serial interfaces 1 Serial(sync/async) interface 1 Channelized E1/PRI port 62720K bytes of ATA CompactFlash (Read/Write) Configuration: <code> Current configuration : 3815 bytes ! version 12.3 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname R1_Zone1 ! boot-start-marker boot-end-marker ! logging buffered 51200 warnings ! no aaa new-model ! resource policy ! network-clock-participate wic 1 network-clock-select 1 E1 0/1/0 ip subnet-zero ! ! ip cef no ip dhcp use vrf connected ! ! no ip domain lookup ip domain name yourdomain.com no ftp-server write-enable isdn switch-type primary-qsig ! voice-card 0 codec complexity medium no dspfarm ! ! ! ! ! ! ! ! ! ! ! ! username cisco privilege 15 secret 5 <removed> ! ! controller E1 0/1/0 framing NO-CRC4 pri-group timeslots 1-3,16 ! ! ! interface Loopback0 ip address 192.168.2.193 255.255.255.192 h323-gateway voip interface h323-gateway voip id GK-zone1 ipaddr 192.168.2.193 1719 h323-gateway voip h323-id GW-zone1 h323-gateway voip tech-prefix 1# h323-gateway voip bind srcaddr 192.168.2.193 ! interface FastEthernet0/0 description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0/0$ ip address 192.168.0.1 255.255.255.0 load-interval 30 duplex auto speed auto fair-queue 64 256 1 ip rsvp bandwidth 20 20 ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface Serial0/0/0 bandwidth 512 no ip address encapsulation frame-relay shutdown no keepalive no fair-queue clockrate 2000000 frame-relay traffic-shaping ip rsvp bandwidth ! interface Serial0/0/0.1 point-to-point ip address 10.0.0.3 255.255.255.192 ip ospf network point-to-point frame-relay interface-dlci 17 frame-relay ip rtp header-compression ip rsvp bandwidth ! interface Serial0/1/0:15 no ip address isdn switch-type primary-qsig isdn incoming-voice voice no cdp enable ! router ospf 113 log-adjacency-changes network 10.0.0.0 0.0.0.63 area 1 network 192.168.0.0 0.0.0.255 area 0 network 192.168.2.192 0.0.0.63 area 0 ! ip classless ! ip http server ip http access-class 23 ip http authentication local ip http timeout-policy idle 60 life 86400 requests 10000 ! ! ! ! control-plane ! no call rsvp-sync ! ! voice-port 0/1/0:15 cptone FR timeouts interdigit 5 ! ! ! ! ! dial-peer voice 1 pots destination-pattern 1[0-8] direct-inward-dial port 0/1/0:15 forward-digits all ! dial-peer voice 100 voip destination-pattern .T modem passthrough nse codec g711alaw session target ras dtmf-relay cisco-rtp h245-signal req-qos guaranteed-delay codec g729r8 bytes 40 fax nsf 000000 no vad ! gateway timer receive-rtp 1200 ! ! gatekeeper zone local GK-zone1 zone1.test.com 192.168.2.193 zone remote GK-zone2 zone2.test.com 172.16.0.2 1719 zone prefix GK-zone1 1. gw-priority 10 GW-zone1 zone prefix GK-zone2 2. zone prefix GK-zone2 3. gw-type-prefix 1#* default-technology no shutdown ! banner login ^C ----------------------------------------------------------------------- Cisco Router and Security Device Manager (SDM) is installed on this device. This feature requires the one-time use of the username "cisco" with the password "cisco". The default username and password have a privilege le vel of 15. Please change these publicly known initial credentials using SDM or the IOS CLI. Here are the Cisco IOS commands. username <myuser> privilege 15 secret 0 <mypassword> no username cisco Replace <myuser> and <mypassword> with the username and password you want to use . For more information about SDM please follow the instructions in the QUICK START GUIDE for your router or go to <a href="http://www.cisco.com/go/sdm" rel="nofollow">http://www.cisco.com/go/sdm</a> ----------------------------------------------------------------------- ^C ! line con 0 login local line aux 0 line vty 0 4 access-class 23 in privilege level 15 absolute-timeout 1000 login local line vty 5 15 access-class 23 in privilege level 15 login local ! scheduler allocate 20000 1000 ! end </code>