You are on page 1of 5

IS-VWG-01#sh runn Building configuration... Current configuration : 11862 bytes ! version 12.

4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname IS-VWG-01 ! boot-start-marker boot system tftp c2800nm-advipservicesk9-mz.124-24.T3.bin 192.168.1.10 boot-end-marker ! !card type command needed for slot 1 logging message-counter syslog no logging buffered enable secret 5 $1$bgXO$Yigyo.4bQxEm8D1BCpBS00 ! aaa new-model ! ! aaa authentication login default local aaa authentication login ciscocp_vpn_xauth_ml_1 local aaa authorization exec default local ! ! aaa session-id common clock timezone UTC -6 clock summer-time UTC recurring 1 Sun Apr 2:00 last Sun Oct 2:00 no network-clock-participate slot 1 ! voice-card 0 ! voice-card 1 dsp services dspfarm ! dot11 syslog ip source-route ! ! ip cef no ip dhcp use vrf connected ip dhcp excluded-address 192.168.101.254 ip dhcp excluded-address 192.168.1.1 192.168.1.59 ip dhcp excluded-address 192.168.1.245 192.168.1.254 ! ip dhcp pool VOICE network 192.168.101.0 255.255.255.0 default-router 192.168.101.254 option 150 ip 192.168.101.254 ! ip dhcp pool DATA network 192.168.1.0 255.255.255.0 dns-server 200.33.146.233 200.33.146.169 default-router 192.168.1.254 ! !

no ip domain lookup ip domain name integra.com.mx no ipv6 cef ! multilink bundle-name authenticated ! ! ! ! ! ! ! crypto pki trustpoint phonevpn enrollment selfsigned serial-number none ip-address none subject-name cn=integravpn revocation-check crl rsakeypair phonevpn 1024 ! ! crypto pki certificate chain phonevpn certificate self-signed 06 <removed> quit ! ! username admin privilege 15 secret <removed> username phone7942 secret <removed> archive log config hidekeys ! ! ! ! ! controller E1 1/0/0 ! ip ssh version 1 ! ! ! ! interface Loopback1 ip address 192.168.10.254 255.255.255.0 ! interface FastEthernet0/0 no ip address duplex auto speed auto ! interface FastEthernet0/0.101 encapsulation dot1Q 101 ip address 192.168.101.254 255.255.255.0 h323-gateway voip interface h323-gateway voip bind srcaddr 192.168.101.254 !

interface FastEthernet0/0.102 encapsulation dot1Q 102 ip address 192.168.1.254 255.255.255.0 ip nat inside ip virtual-reassembly ip tcp adjust-mss 1300 ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! interface FastEthernet0/1/0 switchport access vlan 102 switchport voice vlan 101 ! interface FastEthernet0/1/1 switchport access vlan 102 switchport voice vlan 101 ! interface FastEthernet0/1/2 switchport access vlan 102 switchport voice vlan 101 ! interface FastEthernet0/1/3 switchport access vlan 102 switchport voice vlan 101 ! interface FastEthernet0/1/4 switchport access vlan 102 switchport voice vlan 101 ! interface FastEthernet0/1/5 switchport access vlan 102 switchport voice vlan 101 ! interface FastEthernet0/1/6 switchport access vlan 102 switchport voice vlan 101 ! interface FastEthernet0/1/7 switchport access vlan 102 switchport voice vlan 101 ! interface FastEthernet0/1/8 switchport mode trunk ! interface ATM0/2/0 mtu 1492 no ip address no ip redirects no ip unreachables no ip proxy-arp ip tcp adjust-mss 1452 no atm ilmi-keepalive pvc 8/81 pppoe-client dial-pool-number 1 ! !

interface Vlan1 no ip address ! interface Dialer1 description DSL mtu 1454 ip address negotiated ip nat outside ip virtual-reassembly encapsulation ppp dialer pool 1 no cdp enable ppp pap sent-username <removed> password <removed> ! ip local pool phonevpn 192.168.1.1 192.168.1.4 ip local pool sslvpn 192.168.10.1 192.168.10.20 ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 200.38.193.226 ip http server ip http authentication local ip http secure-server ip http path flash: ! ! ip nat inside source list 10 interface Dialer1 overload ! access-list 10 permit 192.168.1.0 0.0.0.255 ! ! ! ! ! tftp-server flash:cmterm_7985.4-1-2-0.bin ! control-plane ! ! ! ! line con 0 logging synchronous line aux 0 line vty 0 4 exec-timeout 30 0 logging synchronous ! scheduler allocate 20000 1000 ntp master 3 ! webvpn gateway gateway_1 hostname IS-VWG-01 ip address 201.155.102.188 port 443 http-redirect port 80 ssl trustpoint phonevpn inservice ! webvpn install svc flash:/webvpn/anyconnect-win-2.5.0217-k9.pkg sequence 1 ! webvpn context phonevpn secondary-color white

title-color #CCCC66 text-color black ssl authenticate verify all ! ! policy group policy_1 functions file-access functions file-browse functions file-entry functions svc-enabled svc address-pool "sslvpn" svc keep-client-installed default-group-policy policy_1 aaa authentication list ciscocp_vpn_xauth_ml_1 gateway gateway_1 domain phonevpn inservice ! end IS-VWG-01# IS-VWG-01#