version 15.2
no service pad
service timestamps debug datetime localtime show-timezone
service timestamps log datetime localtime show-timezone
service password-encryption
!
hostname cisco-router-pri
!
boot-start-marker
boot-end-marker
!
!
logging buffered 500000 informational
enable secret **********
!
aaa new-model
!
!
aaa authentication login default local group tacacs+
aaa authorization exec default local group tacacs+ none
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 0 default stop-only group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
!
!
!
!
!
aaa session-id common
!
memory-size iomem 10
clock timezone GMT 0 0
clock summer-time BST recurring last Sun Mar 2:00 last Sun Oct 3:00
!
!
ip auth-proxy max-login-attempts 5
ip admission max-login-attempts 5
!
!
!
ip dhcp excluded-address 192.168.1.1 192.168.1.119
ip dhcp excluded-address 192.168.1.200 192.168.1.254
!
ip dhcp pool DHCP_STORE
 import all
 network 192.168.1.0 255.255.255.0
 default-router 192.168.1.254
 dns-server **********
 option 191 ascii **********
 option 43 hex **********
!
!
no ip domain lookup
ip domain name **********
ip name-server **********
ip name-server **********
ip cef
no ipv6 cef
!
!
multilink bundle-name authenticated
license udi pid CISCO887VA-SEC-K9 sn **********
!
!
username ********** password **********
!
!
!
!
!
controller VDSL 0
!
ip ssh version 2
!
track 123 ip sla 1 reachability
!
!
crypto isakmp policy 1
 encr 3des
 authentication pre-share
 group 2
crypto isakmp key ********** address 11.11.11.11
!
!
crypto ipsec transform-set MY-TRANSFORM-SET esp-3des esp-sha-hmac
!
!
!
crypto map MY-MAP 10 ipsec-isakmp
 set peer 11.11.11.11
 set transform-set MY-TRANSFORM-SET
 set pfs group2
 match address 101
!
!
interface Ethernet0
 description Not for Customer Use
 no ip address
 shutdown
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
 pvc 0/38
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
!
interface FastEthernet0
 description Customer LAN
 no ip address
!
interface FastEthernet1
 description Customer LAN
 no ip address
!
interface FastEthernet2
 description Not for Customer Use
 no ip address
 shutdown
!
interface FastEthernet3
 description Not for Customer Use
 no ip address
 shutdown
!
interface Vlan1
 description Customer LAN
 ip address 192.168.1.2 255.255.255.0
 standby 10 ip 192.168.1.1
 standby 10 preempt
 standby 10 authentication **********
 standby 10 name **********
 standby 10 priority 110
 standby 10 track 123 decrement 30
!
interface Dialer0
 description WAN DSL
 ip address negotiated
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 ppp authentication chap pap callin
 ppp chap hostname cisco-router-pri@**********
 ppp chap password **********
 crypto map MY-MAP
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip route 0.0.0.0 0.0.0.0 Dialer0
ip route 11.11.11.11 255.255.255.255 Dialer0
!
!
ip sla 1
 icmp-echo 10.44.254.254 source-interface Dialer0
 frequency 10
ip sla schedule 1 life forever start-time now
ip sla auto discovery
!
!
access-list 12 permit **********
access-list 12 permit **********
access-list 12 permit **********
access-list 23 permit **********
access-list 23 permit **********
access-list 23 permit **********
access-list 23 permit **********
access-list 23 permit **********
access-list 23 permit **********
access-list 50 permit **********
access-list 99 permit **********
access-list 99 permit **********
access-list 99 permit **********
access-list 101 permit ip 192.168.1.0 0.0.0.255 any
dialer-list 1 protocol ip permit
no cdp run
!
snmp-server **********
snmp-server community ********** RW 99
snmp-server community ********** RW 12
snmp-server community ********** RO 99
snmp-server community ********** RO 50
snmp-server tftp-server-list 12
snmp-server file-transfer access-group 12 protocol tftp
tacacs-server host ********** timeout 10 key **********
tacacs-server host ********** timeout 10 key **********
tacacs-server directed-request
!
!
!
control-plane
!
!
banner motd ^
If you are not an authorised user DISCONNECT IMMEDIATELY
^
!
line con 0
line aux 0
line vty 0 4
 access-class 23 in
 exec-timeout 20 0
 password **********
 transport input all
!
ntp server **********
!
end