Service Delivery Form: Form Date (Day/month/year) : 23/12/2019 Order Type: New

SERVICE DELIVERY FORM
Form date (day/month/year): 23/12/2019 Order Type: New

Service type: Unmanaged MPLS Product: MPLSVPN Site
(3) RFM (Ready for
(1) RFS (Ready For Service) (2) Acceptance
Management)
(1) and (3) could happen simultaneously. (2) is to be used by Coord. in CC to accept the delivery.
FA: Framework Agreement; SU: Service Unit (the one to which this SDF applies); CC: Carrier Customer; EC: End
Customer
File name must show the specific delivery flow: SDFx_(CC)_(Id SU).
Carrier Customer: TELEFONICA DATA

End Customer: AEROLINEAS ARGENTINAS S.A.
ARGENTINA,S.A.
Local Contact Name: Mr. Richard Martinez Order ID: 010755863
Phone: +595 981 689 025
Telefonica Circuit ID: MPLSVPN Site-0001019123
Email: richard.martinez@aerolineas.com.ar
Data Source is the Order Form
RFS Data
Service internal test results included (document with test results, as specific for this service type and
SU)
Acceptance
SU rejected>
SU accepted
Reason:
Request for external Acceptance tests > Appointment
(dd/mm/yy,hh:mm):
Annex with special conditions to test
If service acceptance timeout (as in FA) expires, then service is automatically accepted.
Repeat RFS and RFS-answer sections as many times as delivery process is carried out (if SU delivery is
not accepted).
RFM Data
Any data to be provided additionally to CC, according to Service Description in FA: not applicable
Ticket Opening
SMC Recovery AMERICAS Business Solutions

Phone number: +17872736340 | +18669936622-Option 1,2 | +17868451650 - Option 1,1
Email: smc.recovery.americas.businesssolutions@telefonica.com
Telefonica CIRCUIT ID: MPLSVPN Site-0001019123
Service Parameters
Site Details
____________________________________________________________________________________________________
________________
TELEFONICA BUSINESS SOLUTIONS Service Delivery Form
Page 1 of 30
Site ID AAARG-PAR-ASU-0001
Site Address Paraguay, Asuncion, Asuncion, Av España 2028 2do piso - Asuncion, Paraguay,
Site Contact Mr. Richard Martinez
Main Access Circuit Information

Access Type Ethernet Physical Media Optical Fiber
Access Speed in Kbps 2000
Bandwidth (download/upload) in
2000 / 2000
Kbps
Max MTU size supported in
1500
Network
Main Access QoS marking and bandwidth

Data-
TBS Classes Data-Bronze Data-Silver Data-Gold Video Voice
Platinum
IPP values1 0 1 2 3 4 5
2
VPN 1 QoS 1264 512 96 0 0 128
Main Access VPN and WAN Configuration Parameters

VPN Name3 Prefix # CE ASN PE ASN CE IP Address4 PE IP Address5
vpn_10834_152 209.13.133.249 209.13.133.250
500 65100 264853
90 /30 /30
Main CPE configuration and parameters

Loopback IP 0.0.0.0 Management IP (only for MPLS Sites)
CPE WAN Interface connected to last mile PE (or FW for IA
Interface GigabitEthernet0/0/0
Service)
Router Brand Cisco Router Brand
Router Model Cisco ISR 4331 Router Model
Cisco 4331 k9 + 2xFXS
Others + 4xEthernet + UC Router additional information
License
1
NOTE: [Type1] values - CE router connected to Carrier PE
2
NOTE: bandwidth values are expressed in Kbps unless otherwise stated.
3
NOTE: PE ASN = Last mile PE ASN number. CE ASN = eBGP ASN between CE and PE per each VPN. Prefix = #
of prefixes contracted per each VPN.
4,3
NOTE: network mask = /30 unless otherwise stated.
5
____________________________________________________________________________________________________
________________
Page 2 of 30
Router Serial FLM2139V1JQ Chassis Serial Number of installed router

Username aero019123 Username configured to remotely access the router
Password pr0v1s10n019123 Password to access the router through line vty
Turn on privileged commands (logged directly into
Enable N/A
privileged mode)
Main Demarcation Point

Provider Name UFINET Paraguay
Circuit / Device ID PYAR01660033
Device Juniper SRX 300
Interface GE0/0
Terminology
Access Circuit Parameters

The table Access Circuit Parameters indicates last mile provider names and access
technologies (Ethernet, EFM, xDSL, E1, etc.) along with the physical line speed of the access
circuit and contracted bandwidth.
QoS Marking and Bandwidth

The table QoS Marking and QoS indicates the correspondence between Telefónica’s
Business Solutions classes and final provider’s QoS 6. DSCP or IP Precedence values must be
configured in the router according to the values indicated in the second row.
If independent bandwidth contracted, class of service bandwidth values will be indicated

per each VPN. In case of shared bandwidth, values will be the same for all VPNs.
CPE Parameters
The table CPE Parameters indicates the parameters of the CPE installed at customer
premises. Values will be set to Customer Property when customers install their own router.
This table includes parameters such as: hardware specifications, CPE credentials and
loopback IP for management (if applicable).
VPN and WAN Configuration Parameters

6
Either connected to third parties or directly to Telefonica Business Solutions Network.
____________________________________________________________________________________________________
________________
Page 3 of 30
The table VPN and WAN Configuration Parameters indicates VPN parameters and BGP
configuration values for the WAN interface of the device installed at customer premises.
Either the router is installed by the customer or TBS, this table will be always fulfilled.
PE TESTS
@GRABUECU2> show configuration routing-instances vpn_10834_15290
description GW_TGS_ATT_AERO_0001;
instance-type vrf;
interface xe-3/1/1.120;
interface ge-3/2/3.518;
route-distinguisher 213.140.32.223:1058;
vrf-import [ in-america-defecto importar_10834_15290 ];
vrf-export [ set-VPN-nexthop out-america-defecto STATIC-TO-BGP

exportar_STATIC_10834_15290 exportar_RIP_10834_15290 exportar_BGP_10834_15290
exportar_10834_15290 ];
vrf-table-label;
routing-options {
maximum-prefixes 500 threshold 90;
auto-export;
protocols {
bgp {
group bgp_PoI {
type external;
neighbor 172.20.28.242 {
import import_default_PoI_backup;
family inet {
unicast {
prefix-limit {
maximum 500;
teardown 90 idle-timeout 30;
____________________________________________________________________________________________________
________________
Page 4 of 30
export [ export_med_backup bgpexportar_10834_15290 ];
remove-private;
peer-as 10834;
local-as 12956;
neighbor 10.31.128.30 {
hold-time 30;
import import_default_PoI;
family inet {
unicast {
prefix-limit {
maximum 500;
export [ control_propagacion NO-EXTCOMM-OUT BGP-OUT ];
remove-private;
peer-as 264853;
rip {
group edcs_rip_10834_15290 {
metric-out 2;
export ripexportar_10834_15290;
____________________________________________________________________________________________________
________________
Page 5 of 30
@GRABUECU2> show configuration interfaces ge-3/2/3.518
description "POI - AAARG - (vpn_10834_15290) (0001018047) - by NSO";
vlan-id 518;
family inet {
mtu 1500;
filter {
input cos_input_PoI_3/2/3.518;
output set_prec_out_PoI_3/2/3;
address 10.31.128.29/30;
@GRABUECU2> show bgp summary instance vpn_10834_15290 | match 10.31.128.30
10.31.128.30 264853 1357815 1331479 0 2 20w5d 5:20:22 Establ
{master}
@GRABUECU2> ping routing-instance vpn_10834_15290 209.13.133.249 source

10.31.128.29 rapid count 2000
PING 209.13.133.249 (209.13.133.249): 56 data bytes
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
____________________________________________________________________________________________________
________________
Page 6 of 30
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!
--- 209.13.133.249 ping statistics ---
2000 packets transmitted, 2000 packets received, 0% packet loss
round-trip min/avg/max/stddev = 21.003/21.823/40.589/1.846 ms
@GRABUEBA5> show configuration routing-instances vpn_10834_15290
description "vpn_10834_15290 VPN MPLS AEROLINEAS";
instance-type vrf;
interface ge-0/0/0.518;
route-distinguisher 94.142.100.162:1058;
vrf-import [ IMPORT-vpn_10834_15290 REJECT ];
vrf-export [ STATIC-TO-BGP EXPORT-STATIC-vpn_10834_15290 EXPORT-BGP-

vpn_10834_15290 EXPORT-vpn_10834_15290 REJECT ];
vrf-table-label;
routing-options {
maximum-prefixes 500 threshold 90;
auto-export;
protocols {
bgp {
group BGP-L3NNI {
neighbor 10.31.128.26 {
hold-time 30;
import L3NNI-IN;
family inet {
unicast {
prefix-limit {
maximum 500;
____________________________________________________________________________________________________
________________
Page 7 of 30
export [ PCTRL-IPSEC NO-EXTCOMM-OUT BGP-OUT ];
remove-private;
peer-as 264853;
@GRABUEBA5> show configuration interfaces ge-0/0/0.518
description "Cliente[VPN] NNIL3-AEROL-(vpn_10834_15290)-(0001018047)";
vlan-id 518;
family inet {
mtu 1500;
filter {
input cos_input_PoI_0/0/0.518;
output set_prec_out_PoI_0/0/0;
address 10.31.128.25/30;
@GRABUEBA5> show bgp summary instance vpn_10834_15290
Groups: 1 Peers: 1 Down peers: 0
Table Tot Paths Act Paths Suppressed History Damp State Pending
vpn_10834_15290.inet.0
779 252 0 0 0 0
vpn_10834_15290.mdt.0
0 0 0 0 0 0
vpn_10834_15290.inet6.0
0 0 0 0 0 0
____________________________________________________________________________________________________
________________
Page 8 of 30
Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|

#Active/Received/Accepted/Damped...
10.31.128.26 264853 907731 906377 0 4 7w2d 10:21:39 Establ
vpn_10834_15290.inet.0: 11/11/11/0
@GRABUEBA5> ping routing-instance vpn_10834_15290 209.13.133.249 source

10.31.128.25 rapid count 2000
PING 209.13.133.249 (209.13.133.249): 56 data bytes
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!
--- 209.13.133.249 ping statistics ---
2000 packets transmitted, 2000 packets received, 0% packet loss
round-trip min/avg/max/stddev = 20.651/21.300/33.495/1.198 ms
CPE TESTS
@GRABUECU2> telnet routing-instance vpn_10834_15290 209.13.133.249 source

10.31.128.29
Trying 209.13.133.249...
Connected to 209.13.133.249.
Escape character is '^]'.
____________________________________________________________________________________________________
________________
Page 9 of 30
User Access Verification
Username: aero019123
Password:
15290_AsuncionParaguaySuc_108701#wr
Building configuration...
[OK]
15290_AsuncionParaguaySuc_108701#sh run
Building configuration...
Current configuration : 11350 bytes
! Last configuration change at 19:13:39 UTC Mon Dec 23 2019 by tiws
version 16.7
service timestamps debug datetime msec
service timestamps log datetime msec
platform qfp utilization monitor load 80
no platform punt-keepalive disable-kernel-core
hostname 15290_AsuncionParaguaySuc_108701
boot-start-marker
boot-end-marker
vrf definition Mgmt-intf
____________________________________________________________________________________________________
________________
Page 10 of 30
address-family ipv4
exit-address-family
address-family ipv6
exit-address-family
no aaa new-model
ip domain name tiws
subscriber templating
____________________________________________________________________________________________________
________________
Page 11 of 30
multilink bundle-name authenticated
crypto pki trustpoint TP-self-signed-4169387110
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-4169387110
revocation-check none
rsakeypair TP-self-signed-4169387110
crypto pki certificate chain TP-self-signed-4169387110
____________________________________________________________________________________________________
________________
Page 12 of 30
voice-card 0/2
no watchdog
license udi pid ISR4331/K9 sn FDO21351FP2
no license smart enable
diagnostic bootup level minimal
spanning-tree extend system-id
username tiws privilege 15 secret 5 $1$j21c$GGRM2btiZrH83KRtwmk4V1
username aero019123 privilege 15 secret 5 $1$FRZh$rAGsgkBmbVtVq3CFD83Ul/
redundancy
mode none
vlan internal allocation policy ascending
class-map match-all MM
match access-group name Multimedia
class-map match-all BRONCE
match access-group name Trafico_BRONCE
class-map match-all SUC
____________________________________________________________________________________________________
________________
Page 13 of 30
match any
class-map match-all PLATA
match access-group name Trafico_PLATA
class-map match-all ORO
match access-group name Trafico_ORO
policy-map QOS
class MM
priority 32
class ORO
bandwidth 24
class PLATA
bandwidth 32
class BRONCE
bandwidth 16
policy-map SUC
class class-default
shape average 1024000
service-policy QOS
policy-map MARCADO
class MM
class ORO
class BRONCE
class PLATA
____________________________________________________________________________________________________
________________
Page 14 of 30
interface Loopback0
description AEROLINEAS ARGENTINAS - Asuncion_Paraguay_SUC - REF 108701
ip address 192.168.13.107 255.255.255.255
h323-gateway voip interface
h323-gateway voip bind srcaddr 192.168.13.107
interface Loopback2
description Gestion CRSO
ip address 186.239.242.50 255.255.255.255
interface GigabitEthernet0/0/0
description "INTERFAZ WAN"
ip address 209.13.133.249 255.255.255.252
negotiation auto
description "TO ASA"
ip address 10.30.48.1 255.255.255.0
____________________________________________________________________________________________________
________________
Page 15 of 30
negotiation auto
no ip address
shutdown
negotiation auto
interface Service-Engine0/2/0
interface GigabitEthernet0
vrf forwarding Mgmt-intf
no ip address
shutdown
negotiation auto
interface Vlan1
no ip address
router bgp 65100
bgp log-neighbor-changes
network 209.13.133.248 mask 255.255.255.252
redistribute connected
____________________________________________________________________________________________________
________________
Page 16 of 30
neighbor 209.13.133.250 remote-as 264853
neighbor 209.13.133.250 update-source GigabitEthernet0/0/0
neighbor 209.13.133.250 allowas-in 1
neighbor 209.13.133.250 soft-reconfiguration inbound
distribute-list 20 in
ip forward-protocol nd
no ip http server
ip http access-class 23
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip tftp source-interface GigabitEthernet0
ip route 0.0.0.0 0.0.0.0 10.30.48.2
ip route 151.193.0.3 255.255.255.255 10.30.48.2
ip route 151.193.4.14 255.255.255.255 10.30.48.2
ip route 151.193.51.22 255.255.255.255 10.30.48.2
ip route 151.193.58.14 255.255.255.255 10.30.48.2
ip route 151.193.178.202 255.255.255.255 10.30.48.2
ip route 151.193.254.10 255.255.255.255 10.30.48.2
ip route 151.193.254.14 255.255.255.255 10.30.48.2
ip route 172.17.0.1 255.255.255.255 10.30.48.2
ip ssh client algorithm mac hmac-sha1-96 hmac-sha2-256 hmac-sha2-512
ip ssh client algorithm encryption 3des-cbc aes128-cbc aes128-ctr aes192-cbc aes192-ctr

aes256-cbc aes256-ctr
ip access-list extended Multimedia
permit ip any any precedence critical
permit tcp any any eq 1720
____________________________________________________________________________________________________
________________
Page 17 of 30
ip access-list extended Trafico_BRONCE
permit ip any any precedence routine
ip access-list extended Trafico_ORO
permit ip any any precedence flash
permit ip any any precedence immediate
ip access-list extended Trafico_PLATA
permit ip any any precedence priority
access-list 20 permit 200.204.1.4
access-list 20 permit 10.10.10.0 0.0.0.3
____________________________________________________________________________________________________
________________
Page 18 of 30
access-list 98 deny any
access-list 99 deny any
access-list 110 permit tcp any host 172.17.0.44 eq telnet
access-list 110 permit ip any 151.193.0.0 0.0.255.255
access-list 110 permit tcp 172.30.0.0 0.0.255.255 eq 22 any
access-list 110 permit udp any host 172.17.0.54 eq snmp
access-list 110 permit udp any host 172.17.0.54 eq snmptrap
access-list 110 permit udp any eq snmp host 172.17.0.54
access-list 110 permit udp any eq snmptrap host 172.17.0.54
access-list 110 permit ip any 151.193.0.0 0.0.0.255
access-list 110 permit tcp any 172.30.0.0 0.0.255.255 eq 22
access-list 111 permit tcp any host 172.16.4.15 eq 8400
access-list 111 permit tcp any 192.168.3.0 0.0.0.255 eq www
access-list 111 permit tcp any eq 8400 any
access-list 111 permit udp any host 172.17.0.17 eq domain
access-list 111 permit udp any host 172.16.4.15 eq domain
____________________________________________________________________________________________________
________________
Page 19 of 30
____________________________________________________________________________________________________
________________
Page 20 of 30
access-list 112 permit tcp any any eq ftp-data
access-list 112 permit tcp any any eq ftp
access-list 112 permit tcp any host 172.17.0.32 eq www
access-list 112 permit tcp any any eq pop3
access-list 112 permit tcp any any eq smtp
access-list 112 permit udp any host 172.17.0.22 eq 2967
access-list 112 permit udp any host 172.17.0.22 eq 38293
access-list 112 permit tcp 172.30.0.0 0.0.255.255 eq lpd any
access-list 112 permit tcp any 172.30.0.0 0.0.255.255 eq lpd
snmp-server group G1cSv3Group v3 priv read G1cSv3View access 96
snmp-server view G1cSv3View iso included
snmp-server community gestion RW 99
snmp-server community tmn RO 98
snmp-server community armon$1134 RO
snmp-server community GESTION RO
____________________________________________________________________________________________________
________________
Page 21 of 30
snmp-server community T@S@SolArW1nd5 RO 96
snmp-server trap-source Loopback0
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps config
snmp-server enable traps entity
snmp-server enable traps frame-relay multilink bundle-mismatch
snmp-server enable traps frame-relay
snmp-server enable traps frame-relay subif
snmp-server enable traps syslog
snmp-server enable traps ipsla
snmp-server enable traps dial
snmp-server enable traps bgp
snmp-server enable traps voice poor-qov
control-plane
voice-port 0/2/0
voice-port 0/2/1
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
mgcp profile default
____________________________________________________________________________________________________
________________
Page 22 of 30
line con 0
logging synchronous
transport input none
stopbits 1
line aux 0
stopbits 1
line vty 0 4
privilege level 15
password pr0v1s10n019123
logging synchronous
login local
transport input telnet ssh
line vty 5 15
privilege level 15
password pr0v1s10n019123
logging synchronous
login local
transport input telnet ssh
wsma agent exec
wsma agent config
wsma agent filesys
wsma agent notify
____________________________________________________________________________________________________
________________
Page 23 of 30
end
15290_AsuncionParaguaySuc_108701#sh ver
Cisco IOS XE Software, Version 16.07.01
Cisco IOS Software [Fuji], ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version

16.7.1, RELEASE SOFTWARE (fc6)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Mon 20-Nov-17 19:01 by mcpre
Cisco IOS-XE software, Copyright (c) 2005-2017 by cisco Systems, Inc.
All rights reserved. Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0. The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0. For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.
ROM: IOS-XE ROMMON
15290_AsuncionParaguaySuc_108701 uptime is 3 weeks, 1 day, 19 hours, 46 minutes
Uptime for this control processor is 3 weeks, 1 day, 19 hours, 49 minutes
System returned to ROM by PowerOn
System image file is "bootflash:isr4300-universalk9.16.07.01.SPA.bin"
Last reload reason: PowerOn
____________________________________________________________________________________________________
________________
Page 24 of 30
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
Suite License Information for Module:'esg'
--------------------------------------------------------------------------------
Suite Suite Current Type Suite Next reboot
--------------------------------------------------------------------------------
FoundationSuiteK9 None None None
securityk9
appxk9
AdvUCSuiteK9 None None None
____________________________________________________________________________________________________
________________
Page 25 of 30
uck9
cme-srst
cube
Technology Package License Information:
-----------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------
appxk9 appxk9 Permanent appxk9
uck9 uck9 Permanent uck9
securityk9 securityk9 Permanent securityk9
ipbase ipbasek9 Permanent ipbasek9
cisco ISR4331/K9 (1RU) processor with 1793357K/6147K bytes of memory.
Processor board ID FLM2139V1JQ
1 Virtual Ethernet interface
7 Gigabit Ethernet interfaces
2 Voice FXS interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
3207167K bytes of flash memory at bootflash:.
0K bytes of WebUI ODM Files at webui:.
Configuration register is 0x2102
15290_AsuncionParaguaySuc_108701#sh ip int brief
Interface IP-Address OK? Method Status Protocol
____________________________________________________________________________________________________
________________
Page 26 of 30
GigabitEthernet0/0/0 209.13.133.249 YES NVRAM up up
GigabitEthernet0/0/1 10.30.48.1 YES NVRAM up up
GigabitEthernet0/0/2 unassigned YES NVRAM administratively down down
GigabitEthernet0/1/0 unassigned YES unset down down
Service-Engine0/2/0 unassigned YES unset up up
GigabitEthernet0 unassigned YES NVRAM administratively down down
Loopback0 192.168.13.107 YES NVRAM up up
Loopback2 186.239.242.50 YES NVRAM up up
Vlan1 unassigned YES unset up down
15290_AsuncionParaguaySuc_108701#sh int GigabitEthernet0/0/0
GigabitEthernet0/0/0 is up, line protocol is up
Hardware is ISR4331-3x1GE, address is f8b7.e250.4260 (bia f8b7.e250.4260)
Description: "INTERFAZ WAN"
Internet address is 209.13.133.249/30
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive not supported
Full Duplex, 1000Mbps, link type is auto, media type is RJ45
output flow-control is off, input flow-control is off
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:09:05, output 00:00:34, output hang never
Last clearing of "show interface" counters never
Input queue: 0/375/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
____________________________________________________________________________________________________
________________
Page 27 of 30
5 minute output rate 1000 bits/sec, 1 packets/sec
232509 packets input, 16702086 bytes, 0 no buffer
Received 1654 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
256162 packets output, 30611145 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
15290_AsuncionParaguaySuc_108701#sh ip bgp all summ
For address family: IPv4 Unicast
BGP router identifier 192.168.13.107, local AS number 65100
BGP table version is 4314, main routing table version 4314
251 network entries using 62248 bytes of memory
252 path entries using 34272 bytes of memory
60/47 BGP path/bestpath attribute entries using 16800 bytes of memory
29 BGP AS-PATH entries using 1184 bytes of memory
6 BGP community entries using 160 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 114664 total bytes of memory
104 received paths for inbound soft reconfiguration
BGP activity 1345/1094 prefixes, 4740/4488 paths, scan interval 60 secs
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
209.13.133.250 4 264853 73568 66509 4314 0 0 3w0d 144
15290_AsuncionParaguaySuc_108701#sh inv
____________________________________________________________________________________________________
________________
Page 28 of 30
++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++
INFO: Please use "show license UDI" to get serial number for licensing.
++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++
NAME: "Chassis", DESCR: "Cisco ISR4331 Chassis"
PID: ISR4331/K9 , VID: V04 , SN: FLM2139V1JQ
NAME: "Power Supply Module 0", DESCR: "250W AC Power Supply for Cisco ISR 4330"
PID: PWR-4330-AC , VID: V02 , SN: DCA212814KH
NAME: "Fan Tray", DESCR: "Cisco ISR4330 Fan Assembly"
PID: ACS-4330-FANASSY , VID: , SN:
NAME: "module 0", DESCR: "Cisco ISR4331 Built-In NIM controller"
PID: ISR4331/K9 , VID: , SN:
NAME: "NIM subslot 0/1", DESCR: "NIM-ES2-4"
PID: NIM-ES2-4 , VID: V01 , SN: FOC22344P8X
NAME: "NIM subslot 0/2", DESCR: "NIM-2FXSP Voice Analog Module"
PID: NIM-2FXSP , VID: V01 , SN: FOC22154YYA
NAME: "NIM subslot 0/0", DESCR: "Front Panel 3 ports Gigabitethernet Module"
PID: ISR4331-3x1GE , VID: V01 , SN:
NAME: "module 1", DESCR: "Cisco ISR4331 Built-In SM controller"
____________________________________________________________________________________________________
________________
Page 29 of 30
NAME: "module R0", DESCR: "Cisco ISR4331 Route Processor"
PID: ISR4331/K9 , VID: V04 , SN: FDO21351FP2
NAME: "module F0", DESCR: "Cisco ISR4331 Forwarding Processor"
____________________________________________________________________________________________________
________________
Page 30 of 30

Service Delivery Form: Form Date (Day/month/year) : 23/12/2019 Order Type: New

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Service Delivery Form: Form Date (Day/month/year) : 23/12/2019 Order Type: New

Uploaded by

Copyright:

Available Formats

SERVICE DELIVERY FORM

Form date (day/month/year): 23/12/2019 Order Type: New

Carrier Customer: TELEFONICA DATA

SMC Recovery AMERICAS Business Solutions

Telefonica CIRCUIT ID: MPLSVPN Site-0001019123

Main Access Circuit Information

Main Access QoS marking and bandwidth

Main Access VPN and WAN Configuration Parameters

Main CPE configuration and parameters

Router Serial FLM2139V1JQ Chassis Serial Number of installed router

Main Demarcation Point

Access Circuit Parameters

QoS Marking and Bandwidth

If independent bandwidth contracted, class of service bandwidth values will be indicated

VPN and WAN Configuration Parameters

@GRABUECU2> show configuration routing-instances vpn_10834_15290

vrf-import [ in-america-defecto importar_10834_15290 ];

vrf-export [ set-VPN-nexthop out-america-defecto STATIC-TO-BGP

maximum-prefixes 500 threshold 90;

teardown 90 idle-timeout 30;

export [ export_med_backup bgpexportar_10834_15290 ];

teardown 90 idle-timeout 30;

export [ control_propagacion NO-EXTCOMM-OUT BGP-OUT ];

@GRABUECU2> show configuration interfaces ge-3/2/3.518

description "POI - AAARG - (vpn_10834_15290) (0001018047) - by NSO";

@GRABUECU2> show bgp summary instance vpn_10834_15290 | match 10.31.128.30

10.31.128.30 264853 1357815 1331479 0 2 20w5d 5:20:22 Establ

@GRABUECU2> ping routing-instance vpn_10834_15290 209.13.133.249 source

PING 209.13.133.249 (209.13.133.249): 56 data bytes

--- 209.13.133.249 ping statistics ---

2000 packets transmitted, 2000 packets received, 0% packet loss

round-trip min/avg/max/stddev = 21.003/21.823/40.589/1.846 ms

@GRABUEBA5> show configuration routing-instances vpn_10834_15290

description "vpn_10834_15290 VPN MPLS AEROLINEAS";

vrf-import [ IMPORT-vpn_10834_15290 REJECT ];

vrf-export [ STATIC-TO-BGP EXPORT-STATIC-vpn_10834_15290 EXPORT-BGP-

maximum-prefixes 500 threshold 90;

teardown 90 idle-timeout 30;

export [ PCTRL-IPSEC NO-EXTCOMM-OUT BGP-OUT ];

@GRABUEBA5> show configuration interfaces ge-0/0/0.518

description "Cliente[VPN] NNIL3-AEROL-(vpn_10834_15290)-(0001018047)";

@GRABUEBA5> show bgp summary instance vpn_10834_15290

Groups: 1 Peers: 1 Down peers: 0

Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|

10.31.128.26 264853 907731 906377 0 4 7w2d 10:21:39 Establ

@GRABUEBA5> ping routing-instance vpn_10834_15290 209.13.133.249 source

PING 209.13.133.249 (209.13.133.249): 56 data bytes

--- 209.13.133.249 ping statistics ---

2000 packets transmitted, 2000 packets received, 0% packet loss

round-trip min/avg/max/stddev = 20.651/21.300/33.495/1.198 ms

@GRABUECU2> telnet routing-instance vpn_10834_15290 209.13.133.249 source

Escape character is '^]'.

User Access Verification

Current configuration : 11350 bytes

! Last configuration change at 19:13:39 UTC Mon Dec 23 2019 by tiws

service timestamps debug datetime msec

service timestamps log datetime msec

platform qfp utilization monitor load 80

no platform punt-keepalive disable-kernel-core

vrf definition Mgmt-intf

ip domain name tiws

multilink bundle-name authenticated

crypto pki trustpoint TP-self-signed-4169387110