iUsing 7339 out of 196600 bytes
!
! Last configuration change at 15:41:01 NST Sun Aug 10 2008 by gaurab
! NVRAM config last updated at 15:41:27 NST Sun Aug 10 2008 by gaurab
!
version 12.4
service nagle
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname sanog12-gw
!
boot-start-marker
boot-end-marker
!
logging buffered 8192 debugging
no logging console
enable secret <removed>
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication enable default enable
!
aaa session-id common
clock timezone NST 5 45
ip icmp rate-limit unreachable DF 1000
ip spd mode aggressive
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 202.166.222.1 202.166.222.9
ip dhcp excluded-address 202.166.223.248 202.166.223.255
ip dhcp excluded-address 202.166.222.65 202.166.222.79
!
ip dhcp pool SECRETARIAT
   network 202.166.222.0 255.255.255.224
   domain-name conference.sanog.org
   default-router 202.166.222.1 
   dns-server 202.79.32.98 
   lease 0 4
!
ip dhcp pool WIRELESS
   network 202.166.223.0 255.255.255.0
   domain-name conference.sanog.org
   default-router 202.166.223.254 
   dns-server 202.166.222.254 202.79.32.98 
   lease 0 4
!
ip dhcp pool VOIP-workshop
   network 202.166.222.64 255.255.255.192
   domain-name conference.sanog.org
   default-router 202.166.222.65 
   dns-server 202.166.222.254 202.79.32.98 
   lease 0 4
!
!
ip domain name conference.sanog.org
ip name-server 202.79.32.97
ip name-server 202.79.32.98
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
ipv6 unicast-routing
no ipv6 source-route
ipv6 cef
ipv6 dhcp pool v6-wireless
 dns-server 2001:DF9::1
 domain-name conference.sanog.org
!
!
!
username philip secret <removed>
!
!
! 
!
!
!
interface Tunnel1
 description IPv6 tunnel to RS
 no ip address
 load-interval 30
 ipv6 address 2610:178:FFFF:FF00::2/64
 ipv6 flow ingress
 ipv6 flow egress
 tunnel source 202.166.222.1
 tunnel destination 192.148.252.250
 tunnel mode ipv6ip
!         
interface Null0
 no ip unreachables
!         
interface FastEthernet0/0
 description LInk to Wlink through Subisu VLAN 987
 ip address 202.166.198.201 255.255.255.0
 ip access-group 100 in
 ip access-group 101 out
 ip flow ingress
 ip flow egress
 load-interval 30
 speed auto
 half-duplex
 hold-queue 2000 in
!         
interface FastEthernet0/1
 description Trunk port 202.166.222.0/23
 no ip address
 load-interval 30
 duplex auto
 speed auto
 hold-queue 2000 in
!         
interface FastEthernet0/1.1
 description native vlan secretariat 202.166.222.0/27
 encapsulation dot1Q 1 native
 ip address 202.166.222.1 255.255.255.224
 ipv6 address 2001:DF9:5EC::1/64
!
interface FastEthernet0/1.2
 description wireless network 202.166.223.0/24
 encapsulation dot1Q 2
 ip address 202.166.223.254 255.255.255.0
 ipv6 address 2001:DF9:CAFE::1/64
 ipv6 nd other-config-flag
 ipv6 dhcp server v6-wireless
!
interface FastEthernet0/1.3
 description link to server 202.166.222.252/30
 encapsulation dot1Q 3
 ip address 202.166.222.253 255.255.255.252
!
interface FastEthernet0/1.4
 description wired connection to voip lab 202.166.222.64/26
 encapsulation dot1Q 4
 ip address 202.166.222.65 255.255.255.192
!
interface FastEthernet0/1.5
 description not used subnet 202.166.222.32/27
!
router bgp 24555
 no bgp default ipv4-unicast
 bgp log-neighbor-changes
 neighbor 2610:178:FFFF:FF00::1 remote-as 16668
 neighbor 202.166.198.202 remote-as 38217
 neighbor 202.166.198.202 description Dataspace bgp
 !
 address-family ipv4
  neighbor 202.166.198.202 activate
  no auto-summary
  no synchronization
  network 202.166.222.0 mask 255.255.254.0
 exit-address-family
 !
 address-family ipv6
  neighbor 2610:178:FFFF:FF00::1 activate
  neighbor 2610:178:FFFF:FF00::1 prefix-list v6-agg out
  network 2001:DF9::/32
 exit-address-family
!         
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 202.166.198.1
ip route 202.166.222.0 255.255.254.0 Null0 254
!         
ip flow-export source FastEthernet0/0
ip flow-export version 5 peer-as
ip flow-export destination 202.166.222.254 2005
ip flow-top-talkers
 top 20   
 sort-by bytes
 match input-interface FastEthernet0/0
!         
no ip http server
no ip http secure-server
!         
access-list 1 permit 202.166.222.0 0.0.1.255
access-list 11 permit 202.166.222.254
access-list 11 deny   any
access-list 100 permit icmp any any echo-reply
access-list 100 permit icmp any any echo
access-list 100 permit icmp any any ttl-exceeded
access-list 100 permit icmp any any unreachable
access-list 100 deny   icmp any any
access-list 100 permit tcp any host 202.166.222.254 eq www
access-list 100 deny   tcp any any eq www
access-list 100 deny   tcp any any eq 1080
access-list 100 deny   tcp any any eq 3127
access-list 100 deny   tcp any any eq 3128
access-list 100 deny   tcp any any eq 1433
access-list 100 deny   tcp any any eq 4662
access-list 100 deny   tcp any any eq 6881
access-list 100 deny   udp any any eq 6881
access-list 100 deny   udp any eq 6881 any
access-list 100 deny   tcp any eq 6881 any
access-list 100 deny   tcp any any eq 8080
access-list 100 deny   tcp any any eq 20157
access-list 100 deny   tcp any any eq 38402
access-list 100 permit tcp any any established
access-list 100 permit tcp any any eq 22
access-list 100 permit tcp any any eq telnet
access-list 100 permit tcp any any eq bgp
access-list 100 permit udp any any eq domain
access-list 100 permit tcp any any eq ident
access-list 100 permit udp any any eq ntp
access-list 100 permit udp any eq ntp any
access-list 100 permit udp any any eq 5
access-list 100 permit udp any eq isakmp any
access-list 100 deny   udp any any eq 2049
access-list 100 permit udp any any gt 1023
access-list 100 permit ipinip any any
access-list 100 permit 41 any any
access-list 100 permit esp any any
access-list 100 permit gre any any
access-list 100 deny   ip any any log
access-list 101 permit icmp any any echo-reply
access-list 101 permit icmp any any echo
access-list 101 permit icmp any any ttl-exceeded
access-list 101 permit icmp any any unreachable
access-list 101 deny   icmp any any
access-list 101 deny   udp any any eq netbios-ns
access-list 101 deny   tcp any any eq 135
access-list 101 deny   tcp any any eq 139
access-list 101 deny   udp any any eq netbios-dgm
access-list 101 deny   udp any eq 6881 any
access-list 101 deny   udp any any eq 6881
access-list 101 permit ipinip any any
access-list 101 permit 41 any any
access-list 101 permit esp any any
access-list 101 permit gre any any
access-list 101 permit ip any any
access-list 110 deny   ip any host 202.166.222.15
access-list 110 permit ip any any
access-list compiled
snmp-server community <removed> RO 11
no cdp run
ipv6 route 2001:DF9::/32 Null0 254
!
!
ipv6 prefix-list v6-agg seq 5 permit 2001:DF9::/32
!
!
!
ipv6 access-list vty
 permit ipv6 2001:DF9::/32 any
 deny ipv6 any any log
!
control-plane
!
!
!
line con 0
 transport preferred none
line aux 0
line vty 0 4
 access-class 1 in
 ipv6 access-class vty in
 transport preferred none
 transport input ssh
 transport output ssh
!
scheduler allocate 20000 1000
ntp clock-period 17178438
ntp server 204.152.184.72
end

