!
!
! ADTRAN, Inc. OS version R10.5.3.V
! Boot ROM version 17.06.01.V1
! Platform: NetVanta 3430, part number 1202820G1
! Serial number LBADTN1316AL402
!
!
hostname "GWCiao"
enable password md5 encrypted fce79f1e04524453ccca3e81148ca34e
!
clock timezone -5-Eastern-Time
!
ip subnet-zero
ip classless
ip routing
ipv6 unicast-routing
!
!
name-server 8.8.8.8 208.67.222.222 
!
!
auto-config
auto-config authname adtran encrypted password 23253f143cba17e90d7b16d61c9b89691d63
!
event-history on
no logging forwarding
no logging email
!
service password-encryption
!
username "admin" password encrypted "434a3d71b40e3cf8ab46e57be4f5683a5ecd" 
!
!
ip firewall
no ip firewall alg msn
no ip firewall alg mszone
no ip firewall alg h323
!
!
!
!
aaa on
ftp authentication LoginUseLocalUsers
!
!
aaa authentication login LoginUseTacacs group tacacs+
aaa authentication login LoginUseRadius group radius
aaa authentication login LoginUseLocalUsers local
aaa authentication login LoginUseLinePass line
!
aaa authentication enable default enable
!
!
!
!
no dot11ap access-point-control
!
!
!
!
!
!
!
!
!
!
!
!
crypto ike policy 100
  initiate main
  respond main
  local-id address 10.154.135.25
  nat-traversal v1 disable
  nat-traversal v2 force
  peer 142.85.124.15
  attribute 1
    encryption aes-256-cbc
    authentication pre-share
    group 2
    lifetime 86400
!
crypto ike remote-id address 10.120.134.1 preshared-key C1ao-Techno ike-policy 100 crypto map VPN 10 no-mode-config no-xauth nat-t v1 disable nat-t v2 force
!
crypto ipsec transform-set esp-aes-256-cbc-esp-sha-hmac esp-aes-256-cbc esp-sha-hmac
  mode tunnel
!
crypto map VPN 10 ipsec-ike
  description Sogique
  match address VPN-10-vpn-selectors
  set peer 142.85.124.15
  set transform-set esp-aes-256-cbc-esp-sha-hmac
  set security-association lifetime seconds 86400
  set pfs group2
  ike-policy 100
!
!
!
!
!
no ethernet cfm
!
interface loop 1
  ip address  10.154.135.25  255.255.255.0 
  ip address range  10.154.135.1  10.154.135.24  255.255.255.0  secondary
  ip address range  10.154.135.26  10.154.135.254  255.255.255.0  secondary
  no shutdown
!
interface eth 0/1
  description WAN
  ip address  69.70.235.202  255.255.255.252 
  ip access-policy Public
  crypto map VPN
  ! Crypto map will not be used until IP crypto is enabled
  dynamic-dns dyndns-custom ciao.tbltelecom.com tblinc encrypted 280ce475a0380c6cd8991e898e3aa95b83d3b28087cc83f8bc8cffde064dccccbeda87fc849bf35a43321a0f47e7a3b35916
  media-gateway ip primary
  no awcp
  no shutdown
!
!
interface eth 0/2
  encapsulation 802.1q
  no shutdown
!
interface eth 0/2.20
  vlan-id 20 native
  ip address  192.168.100.25  255.255.255.0 
  ip access-policy Private
  media-gateway ip primary
  no awcp
  no shutdown
!
!
!
!
!
!
!
!
ip access-list standard wizard-ics
  remark Internet Connection Sharing
  permit any
!
!
ip access-list extended AdminAccess
  remark AdminAccess
  permit tcp any  any eq telnet  
  permit tcp any  any eq https  
!
ip access-list extended FTP
  remark FTP
  permit tcp any  any eq ftp  
!
ip access-list extended inside
  permit ip 192.168.100.0 0.0.0.255  10.120.134.0 0.0.0.255    
!
ip access-list extended JetBrains
  remark JetBrains
  permit tcp any  any eq 8082  
!
ip access-list extended JTRAC
  remark JTRAC
  permit tcp any  any eq 8080  
!
ip access-list extended outside
  permit ip 10.120.134.0 0.0.0.255  10.154.135.0 0.0.0.255    
!
ip access-list extended PPTP
  remark PPTP
  permit tcp any  any eq 1723  
!
ip access-list extended RDP-Martin
  remark RDP-Martin
  permit tcp any  any eq 43389  
!
ip access-list extended RDP-Me
  remark RDP-ME
  permit tcp any  any eq 43390  
!
ip access-list extended self
  remark Traffic to NetVanta
  permit ip any  any     log
!
ip access-list extended SVN
  remark SVN
  permit tcp any  any eq 3690  
!
ip access-list extended VPN-10-vpn-selectors
  permit ip 10.154.135.0 0.0.0.255  10.120.134.0 0.0.0.255    
!
ip access-list extended web-acl-6
  remark adminaccess
  permit tcp any  any eq telnet   log
  permit tcp any  any eq https   log
!
ip access-list extended Wiki
  remark Wiki
  permit tcp any  any eq 8180  
!
!
!
ip nat pool pool1 static
  local 192.168.100.1 192.168.100.254 global 10.154.135.1 10.154.135.254
!
!
ip policy-class Private
  allow list self self
  nat source list inside pool pool1 policy Public
  nat source list wizard-ics interface eth 0/1 overload
!
ip policy-class Public
  nat destination list outside pool pool1
  allow list web-acl-6 self
  allow list AdminAccess self
  nat destination list FTP address 192.168.100.50
  nat destination list PPTP address 192.168.100.47
  nat destination list JTRAC address 192.168.100.113 port 8083
  nat destination list SVN address 192.168.100.110
  nat destination list Wiki address 192.168.100.55 port 80
  nat destination list RDP-Martin address 192.168.100.150 port 3389
  nat destination list RDP-Me address 192.168.100.155 port 3389
  nat destination list JetBrains address 192.168.100.113 port 80
!
!
!
ip route 0.0.0.0 0.0.0.0 69.70.235.201
!
no tftp server
no tftp server overwrite
http authentication LoginUseLocalUsers
http server
no http secure-server
no snmp agent
no ip ftp server
ip ftp server default-filesystem flash
no ip scp server
no ip sntp server
!
!
!
!
!
!
!
!
ip sip
ip sip udp 5060
no ip sip tcp
!
!
!
voice feature-mode network
voice flashhook mode transparent
voice forward-mode network
!
!
!
!
!
!
!
!
voice dial-plan 1 local NXX-NXX-XXXX 
voice dial-plan 2 long-distance 1-NXX-NXX-XXXX 
!
!
!
!
!
voice trunk T02 type sip
  description "PBX"
  sip-server primary 192.168.100.40
  grammar from host local
  transfer-mode network
!
voice trunk T04 type sip
  description "Sip8803"
  match dnis "1-NXX-NXX-XXXX" replace ani "4189488803" name "Ciao Technologie"
  match dnis "NXX-NXX-XXXX" replace ani "4189488803" name "ciao Tecnologie"
  sip-server primary sip05.unlimitel.ca
  register 4189488803 auth-name "4189488803" password encrypted "3d34f090fc4b9a5d246b3a8a8a1f24e4a871"
  transfer-mode network
!
voice trunk T05 type sip
  description "Sip8804"
  match dnis "1-NXX-NXX-XXXX" replace ani "4189488803" name "Ciao Tecnologie"
  match dnis "NXX-NXX-XXXX" replace ani "4189488803" name "Ciao Technologie"
  sip-server primary sip.unlimitel.ca
  register 4189488804 auth-name "4189488804" password encrypted "4049fce765ef259be9a1262203161619f745"
  transfer-mode network
!
!
voice grouped-trunk UNLIMITEL
  trunk T04
  trunk T05
  accept NXX-NXX-XXX cost 0
  accept 1-NXX-NXX-XXXX cost 0
  accept 011-$ cost 0
  accept 411 cost 0
  accept 611 cost 0
  accept 911 cost 0
  accept $ cost 0
!
!
voice grouped-trunk PBX
  trunk T02
  accept $ cost 0
!
!
!
!
!
!
!
!
!
!
no ip sip registrar authenticate
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ip rtp media-anchoring
!
!
!
line con 0
  login authentication LoginUseLinePass
!
line telnet 0 4
  login authentication LoginUseLocalUsers
  no shutdown
line ssh 0 4
  login authentication LoginUseLocalUsers
  no shutdown
!
sntp server ca.pool.ntp.org
!
!
!
!
end