财政系统cisco3600路由器简写配置(二)
! version 12.3service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname XCS_3661
!
boot-start-marker
boot system flash:c3660-jk9s2-mz.123-14.T7.bin
boot-end-marker
!
enable password 7 100342405344
!
no aaa new-model
!
resource policy
!
ip subnet-zero
!
!
ip cef
no ip domain lookup
no ip dhcp use vrf connected
!
!
carrier-id test
!
!
voice call send-alert
!
voice service pots
!
voice service voip
no allow-connections any to pots
no allow-connections pots to any
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
h323
sip
!
!
!
voice> codec preference 1 g729r8
codec preference 2 g723r53
codec preference 3 g723r63
!
!
voice source-group test
carrier-id source test
carrier-id target test
h323zone-id test
!
!
!
dial-control-mib retain-timer 60
dial-control-mib max-size 1200
!
!
no crypto isakmp ccm
!
!
!
!
interface FastEthernet0/0
description xuchangshi 3661
ip address 10.9.76.54 255.255.255.0
speed 100
full-duplex
no keepalive
no cdp enable
h323-gateway voip interface
!
interface Serial1/0
description CONNECT SHENGTING7206
ip address 10.9.54.38 255.255.255.252
ip access-group xcvirus in
ip access-group xcvirus out
no ip mroute-cache
serial restart-delay 0
no dce-terminal-timing-enable
no fair-queue
no cdp enable
!
interface Serial1/1
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
no cdp enable
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
no cdp enable
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
no cdp enable
!
router ospf 100
log-adjacency-changes
redistribute connected subnets
redistribute static subnets
network 10.9.76.0 0.0.0.255 area 11
network 10.9.54.36 0.0.0.3 area 0
!
no ip http server
no ip http secure-server
ip> ip route 0.0.0.0 0.0.0.0 10.9.54.37
ip route 10.9.77.0 255.255.255.0 10.9.76.9
ip route 10.9.80.0 255.255.255.0 10.9.76.201
ip route 10.9.85.0 255.255.255.0 10.9.76.202
!
!
!
!
ip access-list extended xcvirus
deny tcp any any eq 135
deny tcp any any eq 136
deny tcp any any eq 137
deny tcp any any eq 138
deny tcp any any eq 389
deny tcp any any eq 445
deny tcp any any eq 4444
deny udp any any eq tftp
deny udp any any eq 135
deny udp any any eq 136
deny udp any any eq snmp
deny udp any any eq 389
deny udp any any eq 445
deny udp any any eq 1434
deny udp any any eq 1433
deny tcp any any eq 139
deny tcp any any eq 1087
deny udp any any eq 1087
permit ip any any
snmp-server engineID local 000000090200000943D31D10
snmp-server community public RO
snmp-server community hacz RW
snmp-server packetsize 2048
snmp-server enable traps xgcp
snmp-server enable traps isdn call-information
snmp-server enable traps isdn layer2
snmp-server enable traps hsrp
snmp-server enable traps config
snmp-server enable traps entity
snmp-server enable traps envmon
snmp-server enable traps bgp
snmp-server enable traps rsvp
snmp-server enable traps frame-relay
snmp-server enable traps frame-relay subif
snmp-server enable traps syslog
snmp-server enable traps rtr
snmp-server enable traps dlsw
snmp-server enable traps dial
snmp-server enable traps dsp card-status
snmp-server enable traps voice poor-qov
snmp-server host 10.8.4.69 publicvoice snmp
no cdp run
!
!
!
!
control-plane
!
!
!
!
!
!
!
dial-peer voice 300 voip
destination-pattern 00....
session target ipv4:10.9.54.74
!
dial-peer voice 100378 voip
destination-pattern 78....
session target ipv4:10.9.54.6
!
dial-peer voice 98 voip
destination-pattern 98....
session target ipv4:10.9.54.46
!
dial-peer voice 100392 voip
destination-pattern 92....
session target ipv4:10.9.54.34
!
dial-peer voice 71 voip
destination-pattern 71....
session target ipv4:10.9.46.181
!
。。。。。。。。
页:
[1]