!
version 15.1
service timestamps log datetime msec
service timestamps debug datetime msec
service password-encryption
security passwords min-length 10
!
hostname R3
!
login on-success log
!
!
enable secret 5 $1$mERr$fhfQ8owf6EcHw4lWPSe2f0
enable password 7 0822455D0A165445415F59
!
!
!
!
!
aaa new-model
!
aaa authentication login SSH_LINES local 
aaa authentication login default local-case enable 
aaa authentication login local_auth local 
!
!
!
!
!
!
!
no ip cef
no ipv6 cef
!
!
!
username ayush secret 5 $1$mERr$PrA0bR3RE94SApHY0kg/L1
!
!
license udi pid CISCO1941/K9 sn FTX1524G32N-
license boot module c1900 technology-package securityk9
!
!
!
crypto isakmp policy 10
 encr 3des
 authentication pre-share
 group 2
!
crypto isakmp key SECRET-KEY address 209.165.200.226
!
!
!
crypto ipsec transform-set ESP-TUNNEL esp-3des esp-sha-hmac
!
crypto map S2S-MAP 10 ipsec-isakmp 
 set peer 209.165.200.226
 set transform-set ESP-TUNNEL 
 match address VPN-ACL
!
!
!
!
ip ssh version 2
ip ssh authentication-retries 2
ip ssh time-out 90
ip domain-name ccnasecurity.com
!
!
spanning-tree mode pvst
!
ip ips config location ipsdir retries 1
ip ips name IOSIPS
ip ips name iosips
ip ips signature-category
  category all
   retired true
  category ios_ips basic
   retired false
class-map type inspect match-all IN-NET-CLASS-MAP
 match access-group 101
!
policy-map type inspect IN-2-OUT-PMAP
 class type inspect IN-NET-CLASS-MAP
  inspect
!
!
!
zone security OUT-ZONE
zone security IN-ZONE
zone-pair security IN-2-OUT-ZPAIR source IN-ZONE destination OUT-ZONE
 service-policy type inspect IN-2-OUT-PMAP
!
!
interface GigabitEthernet0/0
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface GigabitEthernet0/1
 ip address 172.16.3.1 255.255.255.0
 ip ips iosips out
 zone-member security IN-ZONE
 duplex auto
 speed auto
!
interface Serial0/0/0
 no ip address
 clock rate 2000000
 shutdown
!
interface Serial0/0/1
 ip address 10.2.2.1 255.255.255.252
 ip ips IOSIPS in
 zone-member security OUT-ZONE
 ip ospf authentication message-digest
 ip ospf message-digest-key 1 md5 ayush12345
 crypto map S2S-MAP
!
interface Vlan1
 no ip address
 shutdown
!
router ospf 1
 log-adjacency-changes
 area 0 authentication message-digest
 passive-interface GigabitEthernet0/1
 network 172.16.3.0 0.0.0.255 area 0
 network 10.2.2.0 0.0.0.7 area 0
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.2.2.2 
!
ip flow-export version 9
!
!
ip access-list extended VPN-ACL
 remark Link to the CCNAS-ASA
 permit ip 172.16.3.0 0.0.0.255 192.168.1.0 0.0.0.255
access-list 101 permit ip 172.16.3.0 0.0.0.255 any
access-list 100 permit udp any any eq bootpc
!
no cdp run
!
banner motd $Unauthorized access strictly prohibited!$
!
!
!
snmp-server community write RO
snmp-server community read RW
!
logging trap debugging
logging 172.16.3.3
logging 10.2.2.1
line con 0
 transport output telnet
 exec-timeout 5 0
 logging synchronous
 login authentication local_auth
 privilege level 15
!
line aux 0
!
line vty 0 4
 exec-timeout 15 0
 login authentication local_auth
 transport input telnet
 privilege level 15
!
!
parser view admin1
 secret 5 $1$mERr$ILrAmVhMGbrCFnj8QqS3T.
 commands exec include configure
 commands exec include all configure terminal
 commands exec include all debug
 commands exec include all show
!
parser view admin2
 secret 5 $1$mERr$Y86euNWSPLMQo.DAj6vGJ0
 commands exec include configure
 commands exec include all configure terminal
 commands exec include all show
!
parser view tech
 secret 5 $1$mERr$QMUdu4f7Qgk/Gy0quE8Eh0
 commands exec include show
 commands exec include show interfaces
 commands exec include show ip
 commands exec include show ip interface
 commands exec include show ip interface brief
 commands exec include show parser
 commands exec include show parser view
 commands exec include show version
!
ntp authentication-key 1 md5 080F787E1918160405041E00 7
ntp authenticate
ntp trusted-key 1
ntp server 10.1.1.2
ntp update-calendar
!
end

