You are on page 1of 5

BIF_Miraflores_Sec#sh run

Building configuration...
Current configuration : 6674 bytes
!
! NVRAM config last updated at 15:32:48 UTC Mon Oct 21 2013 by mi.zamalloa733
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname BIF_Miraflores_Sec
!
boot-start-marker
boot-end-marker
!
logging buffered 16000 debugging
no logging console
enable secret 5 $1$Y0lC$b1AiDzPQReYWuimVDTSFO/
!
aaa new-model
!
!
aaa authentication login default group tacacs+ enable
aaa authentication enable default group tacacs+ enable
aaa authorization commands 1 default group tacacs+ none
aaa authorization commands 15 default group tacacs+ none
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting network default start-stop group tacacs+
aaa accounting connection default start-stop group tacacs+
!
aaa session-id common
!
resource policy
!
clock timezone UTC -5
ip cef
!
!
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
class-map match-any qos5
match ip dscp cs5
match ip dscp cs6
class-map match-any qos1
match ip dscp cs1
class-map match-any qos2
match ip dscp cs2
class-map match-any P2
match ip dscp cs2
match access-group name qos2
class-map match-any P5
match access-group name qos5
match ip dscp cs5
!
!
policy-map SetDscpLan
class P5
set ip dscp cs5
class P2
set ip dscp cs2
class class-default
set ip dscp cs1
policy-map WAN_Sec_Datos
class qos2
bandwidth 256
police 256000 48000 96000 conform-action transmit exceed-action set-dscp-tra
nsmit cs1 violate-action set-dscp-transmit 8
class qos1
bandwidth 512
class class-default
fair-queue
policy-map WAN_Sec_Voz
class qos5
priority 256
police 256000 48000 96000 conform-action transmit exceed-action drop violat
e-action drop
policy-map Shape256_Sec_Voz
class class-default
shape average 256000
service-policy WAN_Sec_Voz
policy-map Shape768_Sec_Datos
class class-default
shape average 768000
service-policy WAN_Sec_Datos
!
!
!
!
interface Loopback0
description Interface de Administracion del Enlace Contingencia
ip address 10.234.68.31 255.255.255.255
!
interface FastEthernet0/0
no ip address
no ip redirects
no ip proxy-arp
load-interval 30
speed 100
full-duplex
!
interface FastEthernet0/0.10
description WAN 3.5 CID 541236 RPVL BIF Ag. Miraflores Contingencia - Datos
encapsulation dot1Q 1872
ip address 10.16.17.78 255.255.255.252
service-policy output Shape768_Sec_Datos
!
interface FastEthernet0/0.20
description WAN 3.5 CID 541236 RPVL BIF Ag. Miraflores Contingencia - Voz
encapsulation dot1Q 1873
ip address 10.16.17.82 255.255.255.252
service-policy output Shape256_Sec_Voz
!
interface FastEthernet0/1
description Interface LAN >> Conexion a WS-C2960 PoE de Claro Gi0/2
ip address 10.3.69.102 255.255.255.0 secondary
ip address 10.3.68.102 255.255.255.0
no ip redirects
no ip proxy-arp
ip flow ingress
ip policy route-map VOZ_DATOS
load-interval 30
speed 100
full-duplex
standby 1 ip 10.3.68.100
standby 1 timers 1 5
standby 2 ip 10.3.69.100
standby 2 timers 1 5
service-policy input SetDscpLan
!
router bgp 64514
bgp router-id 10.234.68.31
bgp log-neighbor-changes
neighbor WAN_BIF_Wi_Voz peer-group
neighbor WAN_BIF_Wi_Voz remote-as 12252
neighbor WAN_BIF_Wi_Voz password 7 041D02081B6E037A58
neighbor WAN_BIF_Wi_Voz timers 10 30
neighbor WAN_BIF_Wi_Datos peer-group
neighbor WAN_BIF_Wi_Datos remote-as 12252
neighbor WAN_BIF_Wi_Datos password 7 041D02081B6E037A58
neighbor WAN_BIF_Wi_Datos timers 10 30
neighbor LAN_BIF peer-group
neighbor LAN_BIF remote-as 64514
neighbor LAN_BIF password 7 041D02081B6E037A58
neighbor LAN_BIF timers 10 30
neighbor 10.3.68.101 peer-group LAN_BIF
neighbor 10.3.68.101 description Enlace Datos con CPE Principal
neighbor 10.3.69.101 peer-group LAN_BIF
neighbor 10.3.69.101 description Enlace Voz con CPE Principal
neighbor 10.16.17.77 peer-group WAN_BIF_Wi_Datos
neighbor 10.16.17.77 description Enlace WAN BIF RPVL por Wi - Datos
neighbor 10.16.17.81 peer-group WAN_BIF_Wi_Voz
neighbor 10.16.17.81 description Enlace WAN BIF RPVL por Wi - Voz
!
address-family ipv4
redistribute connected
neighbor WAN_BIF_Wi_Voz send-community both
neighbor WAN_BIF_Wi_Voz soft-reconfiguration inbound
neighbor WAN_BIF_Wi_Voz route-map VOZ out
neighbor WAN_BIF_Wi_Datos send-community both
neighbor WAN_BIF_Wi_Datos soft-reconfiguration inbound
neighbor WAN_BIF_Wi_Datos route-map DATOS out
neighbor LAN_BIF send-community both
neighbor LAN_BIF next-hop-self
neighbor LAN_BIF soft-reconfiguration inbound
neighbor 10.3.68.101 activate
neighbor 10.3.69.101 activate
neighbor 10.16.17.77 activate
neighbor 10.16.17.81 activate
no auto-summary
no synchronization
network 10.3.68.0 mask 255.255.255.0
network 10.3.69.0 mask 255.255.255.0
network 10.234.68.31 mask 255.255.255.255
exit-address-family
!
ip local policy route-map VOZ_DATOS
!
ip bgp-community new-format
ip community-list 1 permit 12252:1200
ip community-list 1 permit 0:1200
ip community-list 2 permit 12252:1202
ip community-list 2 permit 0:1202
!
no ip http server
no ip http secure-server
ip tacacs source-interface Loopback0
!
ip access-list extended qos2
permit ip any host 10.1.100.205
permit ip any host 10.1.100.180
permit ip host 10.3.68.71 any
permit ip any host 10.1.100.46
permit ip any host 10.1.100.43
ip access-list extended qos5
permit ip 10.3.69.0 0.0.0.255 any
permit ip host 10.8.111.49 any
!
access-list 1 permit 10.3.69.0 0.0.0.255
access-list 2 permit 10.234.68.31
access-list 2 permit 10.3.68.0 0.0.0.255
access-list 101 permit ip 10.3.69.0 0.0.0.255 any
access-list 102 permit ip 10.3.68.0 0.0.0.255 any
access-list 102 permit ip host 10.234.68.31 any
route-map VOZ permit 10
description Anuncia las redes de Voz con Comunidad 201
match ip address 1
set community 12252:201
!
route-map DATOS permit 10
description Anuncia las redes de Datos con Comunidad 201
match ip address 2
set community 12252:201
!
route-map VOZ_DATOS permit 10
description Envia la redes de Voz a la subinterface de voz del PE
match ip address 101
set ip next-hop 10.16.17.81
!
route-map VOZ_DATOS permit 20
description Envia la redes de Datos a la subinterface de Datos del PE
match ip address 102
set ip next-hop 10.16.17.77
!
!
!
tacacs-server host 10.192.17.27
tacacs-server host 10.192.17.204
tacacs-server directed-request
tacacs-server key 7 142713051601382025252333351200130D
!
control-plane
!
!
!
!
!
!
!
!
line con 0
password cisco
line aux 0
line vty 0 4
password cisco
!
scheduler allocate 20000 1000
ntp clock-period 17179679
ntp server 10.1.200.180
end
BIF_Miraflores_Sec#

You might also like