! ! Last configuration change at 00:12:07 *MYT* Sun Feb 3 2013 by lms ! NVRAM config last updated at 00:13:04 *MYT* Sun Feb 3 2013 by lms ! NVRAM config last updated at 00:13:04 *MYT* Sun Feb 3 2013 by lms version 15.1 no service pad service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone no service password-encryption service disable-ip-fast-frag service sequence-numbers ! hostname ISR-3825 ! boot-start-marker boot system flash c3825-adventerprisek9-mz.151-4.M5.bin warm-reboot count 10 boot-end-marker ! ! logging count logging buffered 512000 logging console notifications logging monitor notifications ! no aaa new-model ! clock timezone *MYT* 4 0 ! dot11 syslog no ip source-route no ip gratuitous-arps ip options drop ! ip cef ! ! ip dhcp bootp ignore ip dhcp excluded-address 7.7.7.250 7.7.7.254 ip dhcp excluded-address 7.7.8.250 7.7.8.254 ip dhcp excluded-address 1.1.1.250 1.1.1.254 ip dhcp ping packets 3 ! ip dhcp pool *Wi-Fi* network 7.7.7.0 255.255.255.0 default-router 7.7.7.254 dns-server 89.222.222.2 7.7.7.254 lease infinite ! ip dhcp pool *Guest Wi-Fi* network 7.7.8.0 255.255.255.0 default-router 7.7.8.254 dns-server 89.222.222.2 7.7.8.254 lease infinite ! ip dhcp pool *Copper* network 1.1.1.0 255.255.255.0 default-router 1.1.1.254 dns-server 89.222.222.2 1.1.1.254 lease infinite ! ! no ip bootp server ip domain retry 0 ip domain timeout 1 ip domain name .ru ip host ap 7.7.9.2 ip host zebra-dns1 213.145.43.50 ip host zebra-dns2 213.145.47.147 ip host zebra-web 213.146.47.179 ip host Megafon-DNS1 10.77.48.33 ip host Megafon-DNS2 10.77.48.49 ip host Roi-DNS1 89.222.217.131 ip host Roi-DNS2 89.222.222.2 ip host L3-Communications-DNS 4.2.2.5 ip host Cisco-DNS1 64.102.255.44 ip name-server 4.2.2.5 ip name-server 64.102.255.44 ip name-server 10.77.48.49 ip ips config location flash:ips retries 1 ip ips memory threshold 40 ip ips name *IPS* list IPS ! ip ips signature-category category all retired false enabled true event-action reset-tcp-connection deny-packet-inline deny-connection-inline produce-alert ! ip inspect max-incomplete low 180 ip inspect max-incomplete high 250 ip inspect udp idle-time 10 ip inspect dns-timeout 2 ip inspect tcp idle-time 120 ip inspect tcp finwait-time 3 ip inspect tcp synwait-time 7 ip inspect tcp block-non-session ip inspect tcp reassembly queue length 256 ip inspect tcp reassembly timeout 4 ip inspect tcp reassembly memory limit 4096 ip inspect name *USHT* appfw *HTTP* ip inspect name *USHT* tcp timeout 120 ip inspect name *USHT* udp router-traffic timeout 10 ip inspect name *USHT* icmp router-traffic timeout 5 ip inspect name *USHT* fragment maximum 200 timeout 5 ip inspect name *USHT* ftp timeout 60 ip inspect name *USHT* dns timeout 5 ip inspect name *USHT* tftp timeout 60 ip inspect name *USHT* ftps timeout 60 ip inspect name *USHT* smtp timeout 30 ip inspect name *USHT* ntp timeout 5 ip inspect name *USHT* https timeout 60 ip inspect name *USHT* telnet timeout 60 ip inspect name *USHT* echo timeout 5 ip inspect name *USHT* bittorrent ip inspect name *USHT* telnets ip inspect name *USHT* who ip inspect name *USHT* appleqtc ip inspect name *USHT* daytime login block-for 3600 attempts 5 within 60 login delay 10 no ipv6 cef ! appfw policy-name *HTTP* application http max-header-length request 5000 response 5000 action reset alarm max-uri-length 1500 action reset alarm port-misuse default action reset alarm request-method extension default action reset alarm transfer-encoding type compress action reset alarm transfer-encoding type deflate action reset alarm transfer-encoding type gzip action reset alarm transfer-encoding type identity action reset alarm timeout 88 ! appfw policy-name *HTTP-partial-WORK* application http strict-http action reset alarm max-header-length request 5000 response 5000 action reset alarm max-uri-length 1500 action reset alarm port-misuse default action reset alarm request-method extension default action reset alarm transfer-encoding type compress action reset alarm transfer-encoding type deflate action reset alarm transfer-encoding type gzip action reset alarm transfer-encoding type identity action reset alarm timeout 88 ! appfw policy-name www ! multilink bundle-name authenticated ! ! ! ! parameter-map type inspect global alert on tcp reset-PSH enable log dropped-packets enable parameter-map type ooo global tcp reassembly queue length 256 tcp reassembly alarm on parameter-map type trend-global WWW parameter-map type consent WWW ! ! chat-script TEST ABORT ERROR ABORT BUSY "" "AT" OK "ATDT \T" TIMEOUT 45 CONNECT \c chat-script gsm "" "ATDT*99***1#" TIMEOUT 60 "CONNECT" voice-card 0 ! ! ! voice service voip allow-connections h323 to h323 allow-connections h323 to sip allow-connections sip to h323 allow-connections sip to sip sip ! ! ! ! ! crypto pki token default removal timeout 0 ! crypto pki trustpoint TP-self-signed-3249315554 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-3249315554 revocation-check none rsakeypair TP-self-signed-3249315554 ! ! crypto pki certificate chain TP-self-signed-3249315554 certificate self-signed 01 3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030 31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 69666963 6174652D 33323439 33313535 3534301E 170D3132 30383231 31303535 31395A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 32343933 31353535 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 81009CCF DA65ED23 887353B4 857CEA6A 504F9101 33ED20AE B759F721 9B8BD77C 1F3F6D60 C498B8FA 0BF82AC5 8908AAC8 CC73F104 9F5EC0CC 4D8E2B7A 957DBB45 AEAC3DAB 984F43B9 B7098C81 F3A9C9E3 9F997982 C10E8FAF C0584E68 F1CE796E B2D3BDFC 7C7BAAFB 4A9F319C FCF35D60 43EB50EB 47FC3DE4 9DC93E46 118B541F 4AF70203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603 551D2304 18301680 14413418 DCA56E53 C8504A55 319F160C 1C48A559 6C301D06 03551D0E 04160414 413418DC A56E53C8 504A5531 9F160C1C 48A5596C 300D0609 2A864886 F70D0101 05050003 81810013 121CF36E 279EFAA6 EC0AD3AD E47FC7AE A009F28F 1DB4058E 2F2B3E1D 821A06EF 0BDF3FA5 F7618CDF D49A25E7 3818B77A DCA41F5B 75732F07 7A60C396 9B62A1A1 EAF004E8 77093E6D FF2CEAB4 36B7F92F 4CE5D48D 1901108F 2CDA6C7F 6BEC370B D59E43D4 B8288A52 61C0C7CE 382C2EB5 BDF72D4C B35E1F8E 0672F2C1 705CBB quit ! ! license udi pid CISCO3825 sn FTX1240A4GG memory reserve critical 16000 modem call-record terse username lms privilege 15 password 0 works secure boot-image ! redundancy ! crypto key pubkey-chain rsa named-key realm-cisco.pub signature key-string 30820122 300D0609 2A864886 F70D0101 01050003 82010F00 3082010A 02820101 00C19E93 A8AF124A D6CC7A24 5097A975 206BE3A2 06FBA13F 6F12CB5B 4E441F16 17E630D5 C02AC252 912BE27F 37FDD9C8 11FC7AF7 DCDD81D9 43CDABC3 6007D128 B199ABCB D34ED0F9 085FADC1 359C189E F30AF10A C0EFB624 7E0764BF 3E53053E 5B2146A9 D7A5EDE3 0298AF03 DED7A5B8 9479039D 20F30663 9AC64B93 C0112A35 FE3F0C87 89BCB7BB 994AE74C FA9E481D F65875D6 85EAF974 6D9CC8E3 F0B08B85 50437722 FFBE85B9 5E4189FF CC189CB9 69C46F9C A84DFBA5 7A0AF99E AD768C36 006CF498 079F88F8 A3B3FB1F 9FB7B3CB 5539E1D1 9693CCBB 551F78D2 892356AE 2F56D826 8918EF3C 80CA4F4D 87BFCA3B BFF668E9 689782A5 CF31CB6E B4B094D3 F3020301 0001 quit ! ! controller Cellular 0/3 ! ip tcp selective-ack ip ssh port 2233 rotary 1 ip ssh version 2 ! track 1 ip sla 1 reachability default-state up delay down 45 up 2 ! class-map type inspect icq match-any IM-ICQ match service any ! ! policy-map type inspect im icq class type inspect icq IM-ICQ reset log ! ! ! ! buffers tune automatic ! ! ! ! ! interface Loopback911 ip address 9.1.1.1 255.255.255.255 ! interface GigabitEthernet0/0 description *Wi-Fi Management* ip address 7.7.9.1 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ip nat inside ip virtual-reassembly in ip tcp adjust-mss 1452 duplex full speed 100 media-type rj45 no mop enabled ! interface GigabitEthernet0/0.7 description *Wi-Fi* encapsulation dot1Q 7 ip address 7.7.7.254 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ip nat inside ip virtual-reassembly in ip verify unicast reverse-path ip tcp adjust-mss 1452 ! interface GigabitEthernet0/0.8 description *Guest Wi-Fi* encapsulation dot1Q 8 ip address 7.7.8.254 255.255.255.0 ip access-group GUEST in no ip redirects no ip unreachables no ip proxy-arp ip nat inside ip virtual-reassembly in ip verify unicast reverse-path ip tcp adjust-mss 1452 ! interface GigabitEthernet0/1 ip address 1.1.1.254 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ip nat inside ip virtual-reassembly in ip verify unicast reverse-path ip tcp adjust-mss 1452 duplex auto speed auto media-type rj45 no mop enabled ! interface ATM0/2/0 no ip address no atm ilmi-keepalive dsl operating-mode adsl2+ pvc 1/50 oam-pvc 0 encapsulation aal5snap pppoe-client dial-pool-number 13 ! ! interface Cellular0/3/0 ip address negotiated ip access-group CBAC in ip mtu 1492 ip nat outside ip inspect *USHT* out ip virtual-reassembly in max-fragments 24 max-reassemblies 20 encapsulation ppp load-interval 30 shutdown dialer in-band dialer idle-timeout 0 dialer string gsm dialer redial interval 20 attempts 200 dialer-group 2 async mode interactive ppp chap hostname megafon ppp chap password 0 megafon ppp ipcp dns request ! interface Async0/0/0 no ip address no ip redirects no ip unreachables no ip proxy-arp ip mtu 1492 encapsulation ppp shutdown dialer in-band dialer pool-member 2 async mode dedicated no fair-queue no keepalive routing dynamic ! interface Dialer2 ip address negotiated ip access-group CBAC in ip mtu 1492 ip nat outside ip inspect *USHT* out ip virtual-reassembly in ip verify unicast reverse-path encapsulation ppp dialer pool 2 dialer idle-timeout 3600 dialer string 8,4956091111 dialer hold-queue 50 dialer-group 2 ppp authentication pap chap callin ppp pap sent-username zebra password 0 zebra ppp ipcp dns request no cdp enable ! interface Dialer13 ip address negotiated ip access-group CBAC in no ip redirects no ip unreachables no ip proxy-arp ip mtu 1492 ip nat outside ip ips *IPS* in ip ips *IPS* out ip inspect *USHT* out ip virtual-reassembly in ip verify unicast reverse-path encapsulation ppp dialer pool 13 ppp authentication chap callin ppp chap hostname SOLOVJOVA13 ppp chap password 0 133878 ppp ipcp dns request no cdp enable ! no ip forward-protocol nd ip http server ip http authentication local ip http secure-server ip http path flash:/cme86 ! ! ip dns view default domain timeout 1 domain retry 0 ip dns server ip nat translation timeout 140 ip nat translation tcp-timeout 123 ip nat translation udp-timeout 13 ip nat translation finrst-timeout 6 ip nat translation syn-timeout 10 ip nat translation dns-timeout 3 ip nat translation icmp-timeout 8 ip nat inside source route-map 3G interface Cellular0/3/0 overload ip nat inside source route-map ADSL interface Dialer13 overload ip route 0.0.0.0 0.0.0.0 Dialer13 55 track 1 ip route 0.0.0.0 0.0.0.0 Cellular0/3/0 77 ip route 8.8.8.8 255.255.255.255 Dialer13 ! ip access-list extended CBAC deny ip any any fragments deny ip any any ip access-list extended GUEST deny ip any any fragments deny icmp any any time-exceeded permit udp any host 7.7.8.254 eq domain permit tcp any host 7.7.8.254 eq domain deny ip any 7.7.7.0 0.0.0.255 deny ip any 7.7.8.0 0.0.0.255 deny ip any 7.7.9.0 0.0.0.255 deny ip any 1.1.1.0 0.0.0.255 deny ip any host 9.1.1.1 deny ip any host ************** deny ip any 192.168.22.0 0.0.0.255 permit ip any any ip access-list extended IPS deny icmp any any permit ip any any ! ip sla 1 icmp-echo 8.8.8.8 source-interface Dialer13 timeout 7000 frequency 15 ip sla schedule 1 life forever start-time now logging origin-id hostname access-list 1 permit any access-list 2 permit any access-list 13 permit any dialer-list 1 protocol ip permit dialer-list 2 protocol ip permit ! ! ! ! route-map ADSL permit 13 match ip address LAN 13 match interface Dialer13 ! route-map 3G permit 13 match ip address LAN 13 match interface Cellular0/3/0 ! ! ! control-plane ! ! ! ! mgcp profile default ! ! ! ! ! telephony-service ip source-address 7.7.9.1 port 2000 max-conferences 12 gain -6 web admin system name lms secret 5 $1$mFu5$OXRdKSmmmb90E.2C3kty.. transfer-system full-consult ! ! ! line con 0 logging synchronous line aux 0 line 0/0/0 script dialer TEST modem InOut transport input all transport output all stopbits 1 speed 115200 flowcontrol hardware line 0/3/0 exec-timeout 0 0 script dialer gsm login modem InOut no exec transport input all transport output all rxspeed 3600000 txspeed 384000 line vty 0 4 exec-timeout 40 0 privilege level 15 logging synchronous login local transport input telnet ssh ! scheduler allocate 20000 1000 ntp server 85.114.26.194 event manager applet ADSL-is-UP event track 1 state up action 1.0 cli command "enable" action 1.1 cli command "conf t" action 1.2 cli command "interface Cellular0/3/0" action 1.3 cli command "shutdown" action 1.4 cli command "exit" action 1.5 cli command "end" action 1.6 cli command "clear ip nat trans *" action 1.7 syslog msg "********EEM: ADSL line is UP. Switching from 3G to ADSL. Switch interface Cellular0/3/0 in Shutdown state. Clearing NAT translations.********" event manager applet ADSL-is-DOWN event track 1 state down action 1.0 cli command "enable" action 1.1 cli command "conf t" action 1.2 cli command "interface Cellular0/3/0" action 1.3 cli command "no shutdown" action 1.4 cli command "Interface ATM0/2/0" action 1.5 cli command "shutdown" action 1.6 cli command "no shutdown" action 1.7 cli command "exit" action 1.8 cli command "end" action 1.9 cli command "clear ip nat trans *" action 2.0 syslog msg "********EEM: ADSL line is down. Switching from ADSL to 3G. Switch interface Cellular0/3/0 in UP state. Clearing NAT translations.********" ! end