version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname 2811
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length 6
logging buffered 512000

!
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local 
!
!
aaa session-id common
memory-size iomem 10
clock timezone PST -8
clock summer-time PST recurring
network-clock-participate wic 3 
no ip source-route
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.X.X.2 10.X.X.29
ip dhcp excluded-address 10.X.X.2 10.X.X.29
!
ip dhcp pool DATA
   network 10.X.X.0 255.255.255.0
   default-router 10.X.X.1 
   dns-server 10.X.X.11 
   lease 6
!
ip dhcp pool VOICE
   network 10.X.X.0 255.255.255.0
   default-router 10.X.X.1 
   option 150 ip 10.X.X.1 
   dns-server 10.X.X.10 10.X.X.11 
!
!
no ip bootp server
no ip domain lookup
ip domain name mgvfs.mcleannet
ip inspect name SDM_MEDIUM cuseeme
ip inspect name SDM_MEDIUM dns
ip inspect name SDM_MEDIUM ftp
ip inspect name SDM_MEDIUM h323
ip inspect name SDM_MEDIUM icmp
ip inspect name SDM_MEDIUM imap reset
ip inspect name SDM_MEDIUM pop3 reset
ip inspect name SDM_MEDIUM netshow
ip inspect name SDM_MEDIUM rcmd
ip inspect name SDM_MEDIUM realaudio
ip inspect name SDM_MEDIUM rtsp
ip inspect name SDM_MEDIUM esmtp
ip inspect name SDM_MEDIUM sqlnet
ip inspect name SDM_MEDIUM streamworks
ip inspect name SDM_MEDIUM tftp
ip inspect name SDM_MEDIUM tcp
ip inspect name SDM_MEDIUM udp
ip inspect name SDM_MEDIUM vdolive
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
ip ips notify SDEE
ip ips name sdm_ips_rule
!
multilink bundle-name authenticated
!
isdn switch-type primary-ni
!
!
!
voice-card 0
 no dspfarm
 dsp services dspfarm
!
password encryption aes
!
voice call send-alert
!
voice service voip 
 allow-connections h323 to h323
 allow-connections h323 to sip
 allow-connections sip to h323
 supplementary-service h450.12
 redirect ip2ip
 h323
  h225 h245-address on-connect
!
!
!
!
voice class h323 1
  h225 h245-address on-connect
  h225 h245-address facility
  h225 h245-address progress
  h225 h245-address sync
  h225 h245-address on-setup
  telephony-service ccm-compatible
  ccm-compatible
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-641881997
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-641881997
 revocation-check none
 rsakeypair TP-self-signed-641881997
!
!
crypto pki certificate chain TP-self-signed-641881997
 certificate self-signed 01
  3082024F 308201B8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030 
  30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274 
  69666963 6174652D 36343138 38313939 37301E17 0D303830 33313830 30303731 
  355A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F 
  532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3634 31383831 
  39393730 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100 
  ABB58AE6 395DE76A 5ED9A4DA 63EBD5F7 363B6B62 2E8EB47E 226A3EDB 3772D17C 
  7A2E8D38 58B99EF1 1DBB2E40 7329B152 84476D64 1D90BF74 C9C2AACB 0AD8C4BE 
  7556F096 ACD107AF 256605D2 DB3C4EED 43F62D91 FDC1CB5E 68858714 93EAC74B 
  C1883B55 143B33DF BDA41D46 5D20E06E A78E84DF 138DE6CF B919818E 6B237DAB 
  02030100 01A37930 77300F06 03551D13 0101FF04 05300301 01FF3024 0603551D 
  11041D30 1B821932 38313142 43483031 2E6D6776 66732E6D 636C6561 6E6E6574 
  301F0603 551D2304 18301680 14DB17BE 175DEF82 39DD033F 5DC1D49B 20822DD7 
  ED301D06 03551D0E 04160414 DB17BE17 5DEF8239 DD033F5D C1D49B20 822DD7ED 
  300D0609 2A864886 F70D0101 04050003 81810068 4C0BD5E6 5ACD238A 6D910573 
  E70021E4 3B1C9CFB 96F62EAB 6AF06D1D 416EA644 E04866EA AF181EF4 559CD2C1 
  6AD1E66F 9466950E 7EB42C8E 91F3475A 4BA2C63A B977CC24 BB4E9A49 5AE3AB9B 
  AA048899 9BA678DC 19C9D693 449EDA44 21A9F72D 8B1DF550 08D11E6E 6E2300B3 
  596C3542 41CA15E9 B7236475 B70F03C5 397C78
  	quit
!
!
archive
 log config
  hidekeys
! 
!
crypto isakmp policy 2
 encr aes
 authentication pre-share
 group 2
crypto isakmp key cisco address 0.0.0.0 0.0.0.0
!
!
crypto ipsec transform-set  esp-aes esp-sha-hmac 
 mode transport
!
crypto ipsec profile SDM_Profile1
 set transform-set TEST 
!
!
!
controller T1 0/3/0
 framing esf
 linecode b8zs
 pri-group timeslots 1-10,24
 description 10 Lines from Telus
!
ip tcp synwait-time 10
!
class-map match-any sccp
 match ip dscp cs3 
 match ip dscp af31 
class-map match-any AutoQoS-VoIP-Video
 match ip dscp af41 
class-map match-any sdm_p2p_kazaa
 match protocol fasttrack
 match protocol kazaa2
class-map match-any SDMVoice-Tunnel0
 match ip dscp ef 
class-map match-any SDMVideo-Tunnel0
 match ip dscp af41 
class-map match-any sdm_p2p_edonkey
 match protocol edonkey
class-map match-any sdm_p2p_gnutella
 match protocol gnutella
class-map match-any SDMSignal-Tunnel0
 match ip dscp cs3 
 match ip dscp af31 
class-map match-all vt-video
 match ip dscp af41 
class-map match-any AutoQoS-VoIP-Control-UnTrust
 match ip dscp cs3 
class-map match-any AutoQoS-VoIP-RTP-UnTrust
 match ip dscp ef 
class-map match-all voice
 match ip dscp ef 
!
!
policy-map AutoQoS-Policy-UnTrust
 class AutoQoS-VoIP-RTP-UnTrust
  priority percent 30
 class AutoQoS-VoIP-Control-UnTrust
  bandwidth percent 5
 class AutoQoS-VoIP-Video
  bandwidth percent 40
 class class-default
  fair-queue
policy-map SDM-Pol-Tunnel0
 class sdm_p2p_gnutella
   drop
 class sdm_p2p_edonkey
   drop
 class sdm_p2p_kazaa
   drop
 class SDMVoice-Tunnel0
  priority percent 30
 class SDMSignal-Tunnel0
  bandwidth percent 5
 class SDMVideo-Tunnel0
  bandwidth percent 40
 class class-default
  fair-queue
  random-detect
policy-map T1-output-policy
 class voice
  priority percent 10
 class vt-video
  bandwidth percent 25
 class sccp
  bandwidth percent 3
 class class-default
  fair-queue
  random-detect
policy-map sdmappfwp2p_SDM_MEDIUM
 class sdm_p2p_gnutella
   drop
 class sdm_p2p_edonkey
   drop
 class sdm_p2p_kazaa
   drop
 class class-default
!
!
!
!
!
interface Null0
 no ip unreachables
!
interface Multilink3
 description To head office
 bandwidth 1544
 ip address 10.X.X.30 255.255.255.252
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip flow ingress
 ip flow egress
 ip route-cache flow
 ppp multilink
 ppp multilink interleave
 ppp multilink group 3
 ppp multilink fragment delay 10
 max-reserved-bandwidth 100
 service-policy output T1-output-policy
!
interface FastEthernet0/0
 description Link to Telus DSL
 ip address dhcp
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip flow ingress
 ip flow egress
 ip nat outside
 ip virtual-reassembly
 ip route-cache flow
 duplex auto
 speed auto
 no mop enabled
!
interface Service-Engine0/0
 ip unnumbered FastEthernet0/1.3
 service-module ip address 10.X.X.2 255.255.255.0
 service-module ip default-gateway 10.X.X.1
!
interface FastEthernet0/1
 no ip address
 ip flow ingress
 ip flow egress
 no ip route-cache cef
 duplex auto
 speed auto
!
interface FastEthernet0/1.1
 description Management Vlan
 encapsulation dot1Q 1 native
 ip address 10.X.X.1 255.255.255.0
!
interface FastEthernet0/1.2
 description Data Vlan
 encapsulation dot1Q 2
 ip address 10.X.X.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
!
interface FastEthernet0/1.3
 description Voice Vlan
 encapsulation dot1Q 3
 ip address 10.X.X.1 255.255.255.0
 h323-gateway voip bind srcaddr 10.X.X.1
!
interface Serial0/2/0
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip flow ingress
 ip flow egress
 encapsulation ppp
 ip route-cache flow
 no fair-queue
 service-module t1 timeslots 1-24
 ppp multilink
 ppp multilink group 3
 max-reserved-bandwidth 100
!
interface Serial0/3/0:23
 no ip address
 encapsulation hdlc
 isdn switch-type primary-ni
 isdn incoming-voice voice
 no cdp enable
!
router eigrp 15
 passive-interface default
 network 10.X.X.0 0.0.255.255
 network 10.X.X.0 0.0.0.255
 no auto-summary
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 fastethernet 0/0
ip route 10.X.X.0 255.0.0.0 10.X.X.29 200
ip route 10.X.X.2 255.255.255.255 Service-Engine0/0
ip route 10.X.X.0 255.255.0.0 10.X.X.50
ip route 172.X.X.0 255.255.0.0 10.X.X.29
ip route 172.X.X.0 255.255.0.0 10.X.X.29
ip route 172.X.X.0 255.255.0.0 10.X.X.29
ip route 192.X.X.0.0 255.255.0.0 10.X.X.29
!
ip flow-export version 5
ip flow-export destination 10.X.X.100 2055
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip http path flash:
ip nat inside source list 151 interface FastEthernet0/0 overload
!
access-list 101 remark firewall-acl
access-list 101 permit udp host 129.6.15.28 eq ntp any eq ntp
access-list 101 permit udp any any eq non500-isakmp
access-list 101 permit udp any any eq isakmp
access-list 101 permit esp any any
access-list 101 permit ahp any any
access-list 101 permit gre any any
access-list 101 permit udp host 154.X.X.59 eq domain any
access-list 101 deny   ip 10.X.X.0 0.0.255.255 any
access-list 101 permit udp any eq bootps any eq bootpc
access-list 101 permit icmp any any echo-reply
access-list 101 permit icmp any any time-exceeded
access-list 101 permit icmp any any unreachable
access-list 101 deny   ip 10.X.X.0 0.255.255.255 any
access-list 101 deny   ip 172.X.X.0 0.X.X.255 any
access-list 101 deny   ip 192.X.X.0 0.X.X.255 any
access-list 101 deny   ip 127.X.X.0 0.X.X.255 any
access-list 101 deny   ip host 255.255.255.255 any
access-list 101 deny   ip any any log
access-list 151 permit ip 10.X.X.0 0.X.X.255 any
snmp-server community m00s3 RO
snmp-server community s0ck3y3 RW
!
!
!
route-map nonat permit 10
 match ip address 151
!
!
!
tftp-server flash:P00308000400.bin
tftp-server flash:P00308000400.loads
tftp-server flash:TERM70.7-0-3-0S.loads
tftp-server flash:cnu70.8-2-2ES1.sbn
tftp-server flash:cvm70sccp.8-2-2ES1.sbn
tftp-server flash:jar70sccp.8-2-2ES1.sbn
tftp-server flash:DistinctiveRingList.xml
tftp-server flash:apps70.8-2-2ES1.sbn
tftp-server flash:term70.default
tftp-server flash:dsp70.8-2-2ES1.sbn
tftp-server flash:SCCP70.8-2-2SR1S
tftp-server flash:term71.default
tftp-server flash:ringlist.xml
tftp-server flash:term70.default.loads
tftp-server flash:term71.default.loads
tftp-server flash:Analog1.raw
tftp-server flash:Analog2.raw
tftp-server flash:AreYouThere.raw
tftp-server flash:AreYouThereF.raw
tftp-server flash:Bass.raw
tftp-server flash:CallBack.raw
tftp-server flash:Chime.raw
tftp-server flash:Classic1.raw
tftp-server flash:Classic2.raw
tftp-server flash:ClockShop.raw
tftp-server flash:Drums1.raw
tftp-server flash:Drums2.raw

control-plane
!
!
!
voice-port 0/3/0:23
!
voice-port 0/1/0
 auto-cut-through
 operation 4-wire
 type 5
 signal immediate
 output attenuation -6
 description OutDoor Pageing
!
voice-port 0/1/1
 auto-cut-through
 operation 4-wire
 type 5
 signal immediate
 input gain 10
 description MOH_Live_Feed
 music-threshold -20
!
!
!
sccp local FastEthernet0/1.3
sccp ccm 10.X.X.1 identifier 1 
sccp
!
sccp ccm group 999
 bind interface FastEthernet0/1.3
 associate ccm 1 priority 1
 associate profile 1 register mtp0015f9f77248
!
dspfarm profile 1 transcode
 codec g711ulaw
 codec g711alaw
 codec g729ar8
 codec g729abr8
 codec g729r8
 maximum sessions 2
 associate application SCCP
!
!
dial-peer voice 9002 voip
 destination-pattern 6000
 session protocol sipv2
 session target ipv4:10.8.3.2
 dtmf-relay sip-notify
 codec g711ulaw
 no vad
!
dial-peer voice 911 pots
 trunkgroup FXO-PORTS
 description 911 via the FXO-PORTS
 destination-pattern 911
 prefix 911
 voice-port 0/3/0:23
!
dial-peer voice 411 pots
 trunkgroup FXO-PORTS
 description 411 via the FXO-PORTS
 destination-pattern 411
 prefix 411
 voice-port 0/3/0:23
!
dial-peer voice 919 pots
 trunkgroup FXO-PORTS
 description Enviroment Cananda the FXO-PORTS
 destination-pattern 919005655555
 forward-digits 11
 voice-port 0/3/0:23
!
dial-peer voice 5555 pots
 description Phone paging
 destination-pattern 5555
 forward-digits 0
!
dial-peer voice 2222 pots
 description OutDoor Paging
 destination-pattern 2222
 port 0/1/0
 forward-digits 0
!
dial-peer voice 9 pots
 description 9604... Via FXO-PORTS
 preference 1
 destination-pattern 9604.......
 port 0/3/0:23
 forward-digits 10
!
dial-peer voice 10 pots
 description 91... Via FXO-PORTS
 preference 1
 destination-pattern 91..........
 port 0/3/0:23
 forward-digits 11
!
dial-peer voice 11 pots
 description INT via FXO-PORTS
 destination-pattern 9011T
 port 0/3/0:23
 prefix 011
!
!
dial-peer voice 2000 voip
 preference 1
 destination-pattern 5...
 session target ipv4:172.16.1.2
 dtmf-relay h245-alphanumeric
 no vad
!
dial-peer voice 2001 voip
 preference 1
 destination-pattern 13..
 session target ipv4:172.16.1.2
 dtmf-relay h245-alphanumeric
 no vad
!
!
dial-peer voice 7777 pots
 description MOH_Live_Feed
 destination-pattern 7777
 port 0/1/1
!
!
dial-peer voice 1 pots
 incoming called-number .
 direct-inward-dial
 connection plar 1700
 port 0/3/0:23
!
!
!
!
!
telephony-service
 sdspfarm units 5
 sdspfarm transcode sessions 2
 sdspfarm tag 1 mtp0015f9f77248
 load 7910 P00405000700
 load 7960-7940 P00308000400
 load 7914 S00105000100
 load 7941 TERM41.7-0-3-0S
 load 7971 term71
 load 7970 term70.load
 max-ephones 36
 max-dn 144
 ip source-address 10.x.x.1 port 2000
 auto assign 1 to 15
 system message 
 cnf-file location flash:
 time-zone 5
 date-format dd-mm-yy
 voicemail 6000
 max-conferences 8 gain -6
 web admin system name admin secret 5 
 dn-webedit 
 time-webedit 
 transfer-system full-consult
 secondary-dialtone 9
 create cnf-files version-stamp 7960 May 12 2008 17:56:17
!
!
ephone-template  1
 softkeys hold  Resume Newcall
 softkeys idle  Redial Newcall Cfwdall Dnd
 softkeys alerting  Callback Endcall
 softkeys connected  Hold Endcall Trnsfer Confrn Park
 keep-conference
!
!
ephone-dn  1  dual-line
 number 2630
 label 2630
 description Reciption
 name Reciption
 call-forward busy 6000
 call-forward noan 6000 timeout 10
 hold-alert 30 originator
!
!
ephone-dn  2
 no call-waiting beep
 number 2633
 label 
 name 
 call-forward all 97788386485
 call-forward busy 6000
 call-forward noan 6000 timeout 10
 hold-alert 30 originator
!
!
ephone-dn  3
 no call-waiting beep
 number 2635
 label 
 name
 call-forward busy 6000
 call-forward noan 6000 timeout 10
 hold-alert 30 originator
!
!
ephone-dn  4  dual-line
 no call-waiting beep
 number 2631
 label 
 name
 call-forward busy 6000
 call-forward noan 6000 timeout 10
 hold-alert 30 originator
!
!
ephone-dn  5
 no call-waiting beep
 number 2637
 label 
 name
 call-forward busy 6000
 call-forward noan 6000 timeout 10
 hold-alert 30 originator
!
!
ephone-dn  6
 no call-waiting beep
 number 2634
 label 
 name
 call-forward busy 6000
 call-forward noan 6000 timeout 10
 hold-alert 30 originator
!
!
ephone-dn  7
 no call-waiting beep
 number 2636
 label 
 name
 call-forward busy 6000
 call-forward noan 6000 timeout 10
 hold-alert 30 originator
!
!
ephone-dn  8
 no call-waiting beep
 number 2640
 label 
 name
 call-forward busy 6000
 call-forward noan 6000 timeout 10
 hold-alert 30 originator
!
!
ephone-dn  10
 no call-waiting beep
 number 2639
 label 
 name
 call-forward busy 6000
 call-forward noan 6000 timeout 10
 hold-alert 30 originator
!
!
ephone-dn  11
 no call-waiting beep
 number 2641
 label 
 name
 call-forward busy 6000
 call-forward noan 6000 timeout 10
 hold-alert 30 originator
!
!
ephone-dn  16
 no call-waiting beep
 number 2642
 label 
 name
 call-forward busy 6000
 call-forward noan 6000 timeout 10
 hold-alert 30 originator
!
!
ephone-dn  17
 no call-waiting beep
 number 2643
 label 
 name
 call-forward busy 6000
 call-forward noan 6000 timeout 10
!
!
ephone-dn  18
 number 1001
 label Paging
 name Paging
 paging
!
!
ephone-dn  19
 number 2644
 label 
 name
 call-forward busy 6000
 call-forward noan 6000 timeout 10
 hold-alert 30 originator
!
!
ephone-dn  20
 number 1700
 label 
 name
 hold-alert 30 originator
!
!
ephone-dn  50
 number 8000....
 mwi on
!
!
ephone-dn  51
 number 8001....
 mwi off
!
!
ephone-dn  55
 number 5555
 moh out-call 7777
!
!
ephone  1
 device-security-mode none
 mac-address 000F.8F28.5B1F
 ephone-template 1
 type 7940
 button  1:6 2:20
!
!
!
ephone  2
 device-security-mode none
 video
 mac-address 000E.8349.D8AB
 ephone-template 1
 paging-dn 18
 type 7970
 button  1:4 2:20
!
!
!
ephone  3
 device-security-mode none
 mac-address 0014.F26A.78CA
 ephone-template 1
 paging-dn 18
 type 7960
 button  1:19 2:20
!
!
!
ephone  4
 device-security-mode none
 video
 mac-address 0007.8546.AB4B
 ephone-template 1
 paging-dn 18
 type 7960
 button  1:16 2:20
!
!
!
ephone  5
 device-security-mode none
 mac-address 0013.7FDB.0A9F
 ephone-template 1
 paging-dn 18
 type 7960
 button  1:5 2:20
!
!
!
ephone  6
 device-security-mode none
 video
 mac-address 0012.4362.1709
 type 7960
!
!
!
ephone  7
 device-security-mode none
 video
 mac-address 0013.7FDB.0437
 ephone-template 1
 paging-dn 18
 type 7960
 button  1:2 2:20
!
!
!
ephone  8
 device-security-mode none
 mac-address 0007.8546.AA4A
 ephone-template 1
 username "Reciption"
 paging-dn 18
 type 7960 
 button  1:1 2:20
!
!
!
ephone  9
 device-security-mode none
 video
 mac-address 0013.7FDB.074E
 ephone-template 1
 paging-dn 18
 type 7960
 button  1:8 2:20
!
!
!
ephone  10
 device-security-mode none
 mac-address 0007.8551.ECEC
 ephone-template 1
 paging-dn 18
 type 7960 
 button  1:1 2:20
!
!
!
ephone  12
 device-security-mode none
 mac-address 0011.920E.1CE0
 ephone-template 1
 paging-dn 18
 type 7960
 button  1:11 2:20
!
!
!
ephone  14
 device-security-mode none
 mac-address 0017.957B.B218
 ephone-template 1
 type 7960
 button  1:7 2:20
!
!
!
ephone  15
 device-security-mode none
 mac-address 0011.926F.0291
 ephone-template 1
 paging-dn 18
 type 7960
 button  1:10 2:20
!
!
!
ephone  18
 device-security-mode none
 mac-address 0007.8545.CC69
 ephone-template 1
 paging-dn 18
 type 7960
 button  1:3 2:20
!
!
!
ephone  19
 device-security-mode none
 mac-address 0012.7FFA.4DDA
 ephone-template 1
 paging-dn 18
 type 7960
 button  1:17 2:20
!
!
!
ephone  20
 device-security-mode none
 video
 mac-address 0013.7FDD.3558
 ephone-template 1
 paging-dn 18
 type 7940
 button  1:17 2:20
!
!
!
line con 0
 logging synchronous
line aux 0
line 194
 no activation-character
 no exec
 transport preferred none
 transport input all
 transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
line vty 0 4
 logging synchronous
 transport input ssh
line vty 5 15
 logging synchronous
 transport input ssh
!
scheduler allocate 20000 1000
ntp clock-period 17179890
ntp server 129.6.15.28
!
end