0% found this document useful (0 votes)
105 views4 pages

CCNA - Lab - Summarization 1

This document contains configuration settings for a Cisco router including enabling authentication with TACACS+ servers, configuring SNMP access, setting QoS policies for VoIP traffic, and configuring various interfaces and routing. User access is restricted through access control lists and authentication is required via TACACS+ servers for login access on console, telnet, and enable modes. The router is configured to provide VoIP services and connectivity to internal networks, the internet, and telecommunications services.

Uploaded by

Dong-YulHei
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
105 views4 pages

CCNA - Lab - Summarization 1

This document contains configuration settings for a Cisco router including enabling authentication with TACACS+ servers, configuring SNMP access, setting QoS policies for VoIP traffic, and configuring various interfaces and routing. User access is restricted through access control lists and authentication is required via TACACS+ servers for login access on console, telnet, and enable modes. The router is configured to provide VoIP services and connectivity to internal networks, the internet, and telecommunications services.

Uploaded by

Dong-YulHei
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 4

hostname RENS_RCSAS01,3_P000869

!
boot-start-marker
boot-end-marker
!
!
enable secret 4 HXtG.j7Eq5q4IEPsXD03uwmUcgLCNt0/w5FmpE5H6kU
!
aaa new-model
!
!
aaa authentication login default group tacacs+ local
--More--
Feb 15 20:28:24.635: %IP_SNMP-4-NOTRAPIP: SNMP trap source FastEthernet4 has no ip
address
aaa authentication enable default group tacacs+ enable
aaa authorization exec default group tacacs+ local if-authenticated
aaa authorization commands 0 default group tacacs+ local if-authenticated
aaa authorization commands 1 default group tacacs+ local if-authenticated
aaa authorization commands 15 default group tacacs+ local if-authenticated
aaa accounting commands 5 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
!
!
!
!
!
aaa session-id common
!
memory-size iomem 10
crypto pki token default removal timeout 0
!
!
ip source-route
!
!
!
!
!
ip cef
no ipv6 cef
!
!
multilink bundle-name authenticated
license udi pid CISCO881-K9 sn FTX163484C8
license boot module c880-data level advipservices
!
!
username telmexuser privilege 0 password 7 046F0E0A022454712A1609
!
!
!
!
!
class-map match-any nottrustedinterfaces
match input-interface FastEthernet1
match input-interface FastEthernet2
match input-interface FastEthernet3
class-map match-any voipprotocols
match protocol sip
match protocol h323
match protocol skinny
match protocol mgcp
class-map match-all rtp
match protocol rtp
match not class-map nottrustedinterfaces
class-map match-all signaling
match class-map voipprotocols
match not class-map nottrustedinterfaces
!
!
policy-map voipout
class rtp
set dscp ef
set cos 5
priority 423
class signaling
set dscp cs3
set cos 3
bandwidth 23
class class-default
set dscp default
set cos 0
fair-queue
random-detect
!
!
!
!
!
!
!
!
interface FastEthernet0
description --- CONEXION LAN PLANTA ---
switchport access vlan 2
no ip address
!
interface FastEthernet1
description --- CONEXION MODULO WIFI ---
no ip address
!
interface FastEthernet2
description --- CONEXION INTERNET ---
no ip address
!
interface FastEthernet3
description --- CONEXION INTERNET ---
no ip address
!
interface FastEthernet4
description --- WAN TO CLARO - HAC-BOG.QUIRIGUA-CP1 0/3/42 ---
no ip address
duplex full
speed 100
service-policy output voipout
!
interface FastEthernet4.78
description --- WAN TELEFONIA - RCSAS03 ---
encapsulation dot1Q 78
ip address 10.174.219.238 255.255.248.0
ip access-group HST out
!
interface FastEthernet4.79
description --- WAN INTERNET - RCSAS01 ---
encapsulation dot1Q 79
ip address 10.177.48.219 255.255.248.0
rate-limit input 16000000 2000000 2000000 conform-action transmit exceed-action
drop
rate-limit output 8000000 1000000 1000000 conform-action transmit exceed-action
drop
!
interface Vlan1
description --- LAN INTERNET - RCSAS01 ---
ip address 181.48.27.137 255.255.255.248
!
interface Vlan2
description --- TRUNK 5551 ---
ip address 10.7.227.89 255.255.255.252
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip route 0.0.0.0 0.0.0.0 10.177.48.1
ip route 10.7.0.0 255.255.0.0 FastEthernet4.78 10.174.216.1
!
ip access-list extended HST
permit ip 10.7.0.0 0.0.255.255 10.7.224.0 0.0.0.255
deny ip 10.7.0.0 0.0.255.255 10.7.0.0 0.0.255.255
permit ip any any
!
access-list 1300 permit 10.177.48.0 0.0.7.255
access-list 1300 permit 10.174.216.0 0.0.7.255
access-list 1300 permit 172.31.239.0 0.0.0.255
access-list 1300 permit 172.31.238.0 0.0.0.255
access-list 1300 permit 172.22.0.0 0.0.255.255
!
!
!
!
snmp-server community CpE3677TeLmEx RO 1300
snmp-server community CRpWE3677TeLmEx RW 1300
snmp-server community CLIENTE RW 1300
snmp-server community VoiPGwRd1269 RO 1300
snmp-server community VoiPGwWr3261 RW 1300
snmp-server trap-source FastEthernet4
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps isdn call-information
snmp-server enable traps isdn layer2
snmp-server enable traps isdn chan-not-avail
snmp-server enable traps isdn ietf
snmp-server enable traps config
snmp-server host 172.31.239.119 public
snmp-server host 172.31.239.203 public udp-port 1681
snmp-server host 172.31.239.204 public udp-port 1681
tacacs-server host 172.22.192.5 timeout 2
tacacs-server host 172.22.192.4 timeout 2
tacacs-server directed-request
tacacs-server key 7 121A0C041104010524
!
!
!
control-plane
!
banner motd ^CC

*************************************************************
* ATENCION: Este equipo es propiedad de TELMEX Colombia. *
* El uso no autorizado esta estrictamente prohibido. *
* Todos los usuarios son legalmente responsables de sus *
* acciones sobre el sistema y toda actividad sera registrada*
*************************************************************
^C
!
line con 0
logging synchronous
login authentication TELMEX
transport output all
line aux 0
transport output all
line vty 0 4
access-class 1300 in
login authentication TELMEX
transport input telnet
transport output all
!
scheduler max-task-time 5000
ntp update-calendar
ntp server 172.31.239.199
end

You might also like