
!
! Last configuration change at 09:17:59 MSD Mon Sep 25 2006 by car
! NVRAM config last updated at 09:19:12 MSD Mon Sep 25 2006 by car
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname sr2
!
boot-start-marker
boot system flash disk2:c7200-g4js-mz.123-19.bin
boot-end-marker
!
logging buffered 262144 debugging
logging console critical
enable secret 5 XXXXXXXXXXXXXXXXXXXXXXXXXX
!
clock timezone MSD 3
clock summer-time MSD recurring last Sun Mar 2:00 last Sun Oct 2:00
aaa new-model
aaa session-mib disconnect
!
!
aaa group server radius radgrp
 server R.R.R.R auth-port 1812 acct-port 1815
 ip radius source-interface GigabitEthernet0/2
!
aaa authentication login default local
aaa authentication ppp default group radius
aaa authorization exec default local 
aaa authorization network default group radius 
aaa accounting delay-start 
aaa accounting update periodic 30
aaa accounting network default start-stop group radgrp
aaa accounting connection default start-stop group radgrp
aaa session-id common
ip subnet-zero
no ip source-route
no ip gratuitous-arps
ip icmp rate-limit unreachable 1000
ip icmp rate-limit unreachable DF 1000
ip rcmd rsh-enable
ip flow-cache timeout inactive 30
ip flow-cache timeout active 5
!
!
ip tcp selective-ack
ip tcp timestamp
ip tcp synwait-time 10
no ip ftp passive
ip domain list Doman.Name
no ip domain lookup
ip domain name Doman.Name
ip name-server NS.1.ip.addr
ip name-server NS.2.ip.addr
!
ip cef
ip cef accounting non-recursive 
vpdn enable
!
buffers small permanent 1300
buffers small max-free 1700
buffers small min-free 360
buffers small initial 1024
buffers middle permanent 200
buffers middle max-free 250
buffers middle min-free 40
buffers big permanent 100
buffers big max-free 150
buffers big min-free 20
buffers verybig permanent 20
buffers verybig min-free 5
buffers large permanent 25
buffers large max-free 35
buffers large min-free 5
buffers huge permanent 10
buffers huge min-free 2
!
bba-group pppoe global
 virtual-template 1
 ac name acname
 sessions per-mac limit 1
 sessions per-vlan limit 512
 sessions per-mac throttle 10 600 600
!
bba-group pppoe acgroup
 virtual-template 1
 ac name acname
 sessions per-mac limit 1
 sessions per-vlan limit 256
 sessions per-mac throttle 10 600 600
!
interface Loopback0
 ip address lo.0.ip.addr 255.255.255.255
!
interface GigabitEthernet0/1
 mtu 1548
 no ip address
 no ip proxy-arp
 ip mtu 1524
 no ip mroute-cache
 load-interval 60
 duplex auto
 speed auto
 media-type gbic
 no negotiation auto
 no cdp enable
 hold-queue 4096 in
 hold-queue 4096 out
!
interface GigabitEthernet0/1.2
 encapsulation dot1Q 2
 ip access-group 1 in
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 pppoe enable group acgroup
 no cdp enable
!
interface GigabitEthernet0/1.3
 encapsulation dot1Q 3
 ip access-group 1 in
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 pppoe enable group acgroup
 no cdp enable
!
interface GigabitEthernet0/1.4
!
![like GigabitEthernet0/1.3, about 25 dot1.q interfaces]
!
interface GigabitEthernet0/1.104
 encapsulation dot1Q 104
 ip access-group 1 in
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 pppoe enable group global
 no cdp enable
!
interface GigabitEthernet0/1.160
 encapsulation dot1Q 160
 ip address a.b.c.1 255.255.255.252
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 no cdp enable
!
interface GigabitEthernet0/1.170
 encapsulation dot1Q 170
 ip address a.b.c.5 255.255.255.252
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 no cdp enable
!
interface GigabitEthernet0/1.171
 encapsulation dot1Q 171
 ip address A.B.C.1 255.255.255.252 secondary
 ip address a.b.c.9 255.255.255.252
 ip access-group SLAMMER in
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 pppoe enable group global
 no cdp enable
!
interface GigabitEthernet0/1.172
!
![like GigabitEthernet0/1.171, about 10 interfaces]
!
!
interface GigabitEthernet0/2
 ip address x.x.x.x m.m.m.m
 ip access-group 101 in
 ip access-group 101 out
 no ip unreachables
 no ip proxy-arp
 ip ospf network broadcast
 ip ospf mtu-ignore
 duplex auto
 speed auto
 media-type rj45
 no negotiation auto
 no cdp enable
 hold-queue 2000 in
 hold-queue 2048 out
!
interface GigabitEthernet0/3
 ip address y.y.y.y 255.255.255.240 secondary
 ip address z.z.z.z 255.255.255.224
 no ip unreachables
 no ip proxy-arp
 duplex auto
 speed auto
 media-type rj45
 no negotiation auto
 no cdp enable
 hold-queue 2000 in
 hold-queue 2048 out
!
interface Virtual-Template1
 mtu 1492
 ip unnumbered Loopback0
 no ip redirects
 no ip proxy-arp
 no logging event link-status
 peer ip address forced
 no peer default ip address
 fair-queue
 ppp authentication chap pap
!
router ospf 10
 log-adjacency-changes
 redistribute connected subnets
 redistribute static subnets
 ip address x.x.x.x m.m.m.m
 network x.x.x.x m.m.m.m area 0
!
ip default-gateway d.d.d.d
ip classless
ip route 10.0.0.0 255.0.0.0 Null0
ip route 10.255.255.255 255.255.255.255 Null0
ip route 172.16.0.0 255.240.0.0 null0
no ip http server
!
!
!
ip access-list extended NOBILL
ip access-list extended PLANET
ip access-list extended SLAMMER
 deny   udp any any eq 1434
 deny   tcp any any eq 1434
 permit ip any any
ip access-list extended rate128k-inp
 permit ip any any
ip access-list extended rate128k-out
 permit ip any any
ip radius source-interface GigabitEthernet0/2 
logging trap debugging
access-list compiled reuse
access-list 1 remark deny all trafic
access-list 1 deny   any
access-list 2 remark Permit login
access-list 3 remark SNMP RW
access-list 5 remark ACLnum5
access-list 101 remark block-win-networking
access-list 120 remark output bandwidth limiting
access-list 121 remark input bandwidth limiting
access-list 160 remark -- deny rfc1918
access-list 160 deny   ip 10.0.0.0 0.255.255.255 any
access-list 160 deny   ip 192.168.0.0 0.0.255.255 any
access-list 160 deny   ip 172.16.0.0 0.15.255.255 any
access-list 160 permit ip any any
no cdp run
!
snmp-server community ROCOM RO 5
snmp-server community RWCOM RW 3
snmp-server ifindex persist
snmp-server enable traps tty
!
!
radius-server host R.R.R.R auth-port 1812 acct-port 1815
radius-server retransmit 2
radius-server timeout 10
radius-server key 7 radsecretkeystring
radius-server vsa send accounting
radius-server vsa send authentication
!
!
dial-peer cor custom
!
!
!
!
gatekeeper
 shutdown
!
!
line con 0
 authorization exec cons-access
 login authentication cons-access
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 access-class 2 in
 exec-timeout 300 0
 history size 256
 transport preferred none
 transport input telnet
 transport output telnet
 escape-character BREAK
line vty 5 15
 access-class 2 in
 exec-timeout 300 0
 history size 256
 transport preferred none
 transport input telnet
 transport output telnet
 escape-character BREAK
!
ntp clock-period 17179781
ntp update-calendar
ntp server N.N.N.N
!
end
