Konfigurasi Router MDI - Mpls

rtr1050101#sh run
building configuration...
current configuration : 21460 bytes

!
! last configuration change at 15:18:55 ind_wst mon jul 31 2006 by admin
! nvram config last updated at 10:05:59 ind_wst wed jul 26 2006 by admin
!
version 12.3
service nagle
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec localtime show-timezone
service password-encryption
service compress-config
no service dhcp
!
hostname rtr1050101
!
boot-start-marker
boot system flash:c1700-adventerprisek9-mz.123-16a.bin
boot-end-marker
!
logging buffered 16384 debugging
enable secret 5 $1$vcvu$/kvlzmrg3qgpw94gfh.d6/
!
clock timezone ind_wst 7
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
voice-card 2
!
voice-card 3
!
aaa new-model
!
!
aaa authentication login default group tacacs+ local-case
aaa authorization config-commands
aaa authorization exec default group tacacs+ local if-authenticated
aaa authorization commands 15 default group tacacs+ local if-authenticated
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa session-id common
ip subnet-zero
no ip source-route
ip cef
!
!
!
ip flow-cache timeout active 5
ip tftp source-interface loopback0
no ip bootp server
no ip domain lookup
ip domain name bankmandiri.co.id
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
username sdm privilege 15 password 7 06150b2c
username mandiri privilege 15 password 7 110a1016141d
!
!
class-map match-any not_critical+consumerloan
match access-group name not-critical+consumerloan
class-map match-any not_critical
match access-group name not-critical
class-map match-any critical
match access-group name critical
class-map match-any voip_control
match access-group name voip-control
class-map match-any medium_critical
match access-group name medium-critical
class-map match-any very_critical
match access-group name very-critical
class-map match-any voip_data
match access-group name voip-data
class-map match-any ip_critical
match access-group name ip-critical
!
!
policy-map mark_qos
class very_critical
set precedence 5
class critical
set precedence 4
class medium_critical
set precedence 2
class not_critical
set precedence 2
class class-default
set precedence 0
policy-map mark_packets
class voip_data
set precedence 5
class voip_control
set precedence 5
class ip_critical
set precedence 2
class class-default
set precedence 0
policy-map fr_policy+consumerloan
class very_critical
bandwidth percent 45
random-detect
class critical
random-detect
random-detect
class not_critical+consumerloan
random-detect
class class-default
fair-queue
random-detect
policy-map fr_policy
class very_critical
random-detect
class critical
random-detect
random-detect
class not_critical
random-detect
class class-default
fair-queue
random-detect
!
!
!
!
!
!
interface loopback0
description loopback for remote-management
ip address 10.102.200.2 255.255.255.255
!
interface loopback1
description loopback for h323 voice source
ip address 10.102.200.102 255.255.255.255
h323-gateway voip interface
h323-gateway voip id rtr1050101 ipaddr 10.204.10.254 1719
h323-gateway voip h323-id rtr1050101
h323-gateway voip tech-prefix 1#
h323-gateway voip bind srcaddr 10.102.200.102
!
interface loopback10
description loopback simulating branch iptelephony network
ip address 10.102.102.1 255.255.255.0
!
interface null0
no ip unreachables
!
interface fastethernet0/0
description connection to lan mdn. tiara
ip address 10.102.2.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
speed auto
half-duplex
service-policy input mark_qos
!
interface serial0/0
description frame relay connection to hq
bandwidth 128
no ip address
encapsulation frame-relay
ip route-cache flow
logging event subif-link-status
logging event dlci-status-change
load-interval 30
no fair-queue
frame-relay traffic-shaping
frame-relay lmi-type ansi
!
interface serial0/0.1 point-to-point
description frame relay la 128/128
bandwidth 128
ip address 10.102.201.4 255.255.255.254
frame-relay class frts_class
frame-relay interface-dlci 546
!
interface serial0/1
no ip address
shutdown
!
interface ethernet1/0
description mpls la 64 connection to hq
ip address 218.34.50.5 255.255.255.254
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
half-duplex
!
router bgp 64572
no synchronization
bgp router-id 10.102.200.102
bgp log-neighbor-changes
network 10.102.2.0 mask 255.255.255.0
network 10.102.102.0 mask 255.255.255.0
network 10.102.200.2 mask 255.255.255.255
network 10.102.200.102 mask 255.255.255.255
neighbor 10.102.201.5 remote-as 64555
neighbor 10.102.201.5 timers 20 60
neighbor 10.102.201.5 prefix-list data-net out
neighbor 10.102.201.5 route-map data-in in
neighbor 218.34.50.4 remote-as 65535
neighbor 218.34.50.4 timers 20 60
neighbor 218.34.50.4 route-map voice-in in
neighbor 218.34.50.4 route-map voice-out out
no auto-summary
!
ip classless
ip route 10.204.2.0 255.255.255.0 218.34.50.4
ip route 10.204.10.0 255.255.255.0 null0 200
ip route 172.17.0.0 255.255.255.0 218.34.50.4
!
ip bgp-community new-format
ip community-list 1 permit 64555:200
ip community-list 2 permit 64555:100
ip flow-export source loopback0
ip flow-export version 5
ip flow-export destination 10.204.9.20 9996
no ip http server
ip http authentication local
no ip http secure-server
ip tacacs source-interface loopback0
!
ip access-list extended critical
remark pembayaran-pertamina
permit ip any host 172.17.0.2
permit ip host 172.17.0.2 any
remark simanis
remark exim bill
remark los
remark sds
remark cps
ip access-list extended ip-critical
permit tcp any host 10.204.4.17
permit tcp host 10.204.4.17 any
ip access-list extended medium-critical
remark isa server
remark ftp server
remark trend micro
remark reksa dana
ip access-list extended not-critical
remark e-mail
remark nms
remark ibt
remark e-learning
remark ebg net
remark kmswebserver
remark consumer loan
remark core-a
remark core-b
remark core-c
remark ex traffic
ip access-list extended not-critical+consumerloan
remark e-mail
remark nms
remark ibt
remark e-learning
remark ebg net
remark kmswebserver
remark core-a
remark core-b
remark core-c
remark ex traffic
ip access-list extended not-critical+consumerloan
remark e-mail
remark nms
remark ibt
remark e-learning
remark ebg net
remark kmswebserver
remark core-a
remark core-b
remark core-c
remark ex traffic
ip access-list extended very-critical
remark emas
remark routing protocol
permit tcp any any eq bgp
permit tcp any eq bgp any
ip access-list extended voip-control
permit tcp any 10.204.10.0 0.0.0.255 eq 1720
permit tcp any 10.204.10.0 0.0.0.255 range 11000 11999
permit udp any 10.204.10.0 0.0.0.255 eq 2427
permit tcp any 10.204.10.0 0.0.0.255 eq 2428
permit tcp 10.204.10.0 0.0.0.255 eq 1720 any
permit tcp 10.204.10.0 0.0.0.255 range 11000 11999 any
permit udp 10.204.10.0 0.0.0.255 eq 2427 any
permit tcp 10.204.10.0 0.0.0.255 eq 2428 any
ip access-list extended voip-data
permit udp any any range 16384 32767
permit udp any range 16384 32767 any
ip access-list extended blok-email
deny ip any host 10.204.5.102
deny ip host 10.204.5.102 any
permit ip any any
!
!
ip prefix-list data-net seq 10 permit 10.102.2.0/24
ip prefix-list data-net seq 20 permit 10.102.200.2/32
!
ip prefix-list default-prefix seq 10 permit 0.0.0.0/0
!
ip prefix-list voice-net seq 10 permit 10.102.102.0/24
ip prefix-list voice-net seq 20 permit 10.102.200.102/32
!
map-class frame-relay frts_class
frame-relay end-to-end keepalive mode bidirectional
frame-relay cir 128000
frame-relay bc 16000
frame-relay be 16000
frame-relay mincir 128000
frame-relay adaptive-shaping becn
service-policy output fr_policy
logging trap debugging
logging source-interface loopback0
logging 10.204.9.21
access-list 10 permit 10.204.9.27
access-list 21 permit 10.102.2.0 0.0.0.255
!
route-map voice-out permit 10
match ip address prefix-list data-net
set as-path prepend 64572 64572 64572
!
route-map voice-out permit 20
match ip address prefix-list voice-net
!
route-map data-in permit 10
match community 1
!
route-map voice-in permit 10
match ip address prefix-list default-prefix
match community 2
!
snmp-server community nms_mandiri ro 10
snmp-server community mandirinet rw 11
snmp-server ifindex persist
snmp-server trap-source loopback0
snmp-server location k01-105-mdtiara
snmp-server contact las-fri
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps frame-relay
snmp-server enable traps frame-relay subif
snmp-server host 10.204.9.22 mandirinet
snmp-server host 10.204.9.25 mandirinet
snmp-server host 10.204.13.101 nms_mandiri
snmp-server host 10.204.1.130 test
tacacs-server host 10.204.9.21
tacacs-server directed-request
tacacs-server key 7 130816011f09167e7e72
!
voice-port 2/0
cptone id
description analog phone to server room 1050123
!
voice-port 2/1
cptone id
description analog phone to head teller 1050133
!
voice-port 3/0
cptone id
connection plar 1050133
description pstn line 1
!
voice-port 3/1
cptone id
connection plar 1050133
description pstn line 2
!
!
dial-peer cor custom
!
!
!
dial-peer voice 10 voip
description dial-peer to hq short number 8xxx
destination-pattern 8...
session target ras
dtmf-relay h245-alphanumeric
!
description dial-peer to other branches 1xxxxyy
destination-pattern 1......
session target ras
!
description dial-peer to hq 7xxxxxx
destination-pattern 7......
session target ras
!
description dial-peer to other variable length destination
destination-pattern .t
session target ras
!
dial-peer voice 21 pots
description analog phone to server room 1050123
destination-pattern 1050123
port 2/0
!
description analog phone to head teller 1050133
port 2/1
!
description outgoing call to pstn
preference 3
port 3/0
!
description outgoing call to pstn
preference 4
port 3/1
!
gateway
!
banner login ^cauthorized access only!
disconnect immediately if you are not an authorized user!
there is a default user name and password . you must change it immediately
^c
banner motd ^c
**************************************************************
* this system is the property of bank mandiri tbk. *
* *
* access is restricted to authorized person only *
* unauthorized access is prohibited *
* all unauthorized attempt to access this system will be *
* logged and investigated. *
* violators will be prosecuted in conformance with local law *
**************************************************************
^c
!
line con 0
privilege level 15
password 7 00071a150754
logging synchronous
line aux 0
line vty 0 4
access-class 21 in
exec-timeout 5 0
privilege level 15
password 7 030752180500
logging synchronous
transport input telnet ssh
line vty 5 15
access-class 21 in
exec-timeout 5 0
privilege level 15
password 7 01100f175804
logging synchronous
transport input telnet ssh
!
scheduler interval 500
ntp clock-period 17207783
ntp source loopback0
ntp server 10.204.20.19
end
rtr1050101#sh int ethernet1/0

ethernet1/0 is up, line protocol is up
hardware is pquicc ethernet, address is 000d.28db.6f5d (bia 000d.28db.6f5d)
description: mpls la 64 connection to hq
internet address is 218.34.50.5/31
mtu 1500 bytes, bw 10000 kbit, dly 1000 usec,
reliability 255/255, txload 1/255, rxload 1/255
encapsulation arpa, loopback not set
keepalive set (10 sec)
half-duplex, 10baset
arp type: arpa, arp timeout 04:00:00
last input 00:00:05, output 00:00:00, output hang never
last clearing of "show interface" counters 2w4d
input queue: 0/75/0/0 (size/max/drops/flushes); total output drops: 0
queueing strategy: fifo
output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 1000 bits/sec, 1 packets/sec
976373 packets input, 249860893 bytes, 0 no buffer
received 3 broadcasts, 0 runts, 0 giants, 0 throttles
8 input errors, 0 crc, 0 frame, 6 overrun, 2 ignored
0 input packets with dribble condition detected
2541927 packets output, 406722054 bytes, 2 underruns
2 output errors, 684 collisions, 0 interface resets
0 babbles, 0 late collision, 1249 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out

Konfigurasi Router MDI - Mpls

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Konfigurasi Router MDI - Mpls

Uploaded by

Copyright:

Available Formats

rtr1050101#sh run

current configuration : 21460 bytes

rtr1050101#sh int ethernet1/0

You might also like