!RANCID-CONTENT-TYPE: cisco-clean
!
!
!
!
!
version 15.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime localtime
service password-encryption
no platform punt-keepalive disable-kernel-core
!
hostname KinkisharyoInternational_250MB_AS/KRGN/005386/PT_2825EAveP
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
logging buffered 20000
no logging console
!
aaa new-model
!
aaa authentication fail-message ^CCCCCCCCCCCCCCCC****TACACS+************^C
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ none
!
aaa session-id common
clock timezone PST -8 0
clock summer-time PST recurring
!


ip domain name auto
ip name-server 216.116.96.2
ip name-server 216.116.96.3
no ip dhcp use vrf connected
!
subscriber templating
!
multilink bundle-name authenticated
!
license udi pid ASR1001 sn JAE180902Z8
license boot level advipservices
spanning-tree extend system-id
!
username tzcare privilege 15 secret 5 $1$QcDi$cx/mqm7rFUUwXiVU5g0OJ.
!
redundancy
 mode none
!
ip tftp source-interface GigabitEthernet0
ip ssh version 2
!
class-map match-all BANDWIDTH
 match any 
!
policy-map BANDWIDTH_250MB
 class BANDWIDTH
  police rate 250000000  burst 500000  conform-action transmit  exceed-action drop 
 class class-default
  police rate 250000000  burst 500000  conform-action transmit  exceed-action drop  violate-action drop 
!
interface GigabitEthernet0/0/0
 description KinkisharyoInternational=AS/KRGN/005386/PT
 no ip address
 load-interval 30
 negotiation auto
 service-policy input BANDWIDTH_250MB
 service-policy output BANDWIDTH_250MB
!
interface GigabitEthernet0/0/0.1
 encapsulation dot1Q 2703
 ip address 216.31.137.26 255.255.255.252
 ip access-group 125 in
 ip virtual-reassembly
!
interface GigabitEthernet0/0/1
 description CustomerLAN
 ip address 64.239.142.209 255.255.255.248
 ip access-group 125 in
 ip access-group 125 out
 load-interval 30
 negotiation auto
 service-policy input BANDWIDTH_250MB
 service-policy output BANDWIDTH_250MB
!
interface GigabitEthernet0/0/2
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/3
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 no ip address
 shutdown
 negotiation auto
!
ip nat translation timeout 300
ip nat translation tcp-timeout 300
ip nat translation udp-timeout 90
no ip nat service sip udp port 5060
ip forward-protocol nd
!
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 216.31.137.25
!
access-list 25 permit 64.239.128.0 0.0.63.255
access-list 25 permit 66.6.208.0 0.0.15.255
access-list 25 permit 72.18.0.0 0.0.31.255
access-list 25 permit 208.179.0.0 0.0.255.255
access-list 25 permit 216.31.128.0 0.0.63.255
access-list 25 permit 216.116.96.0 0.0.31.255
access-list 25 deny   any
access-list 125 deny   ip any 159.69.0.0 0.0.255.255
access-list 125 deny   ip any 88.0.0.0 0.255.255.255
access-list 125 deny   ip 88.0.0.0 0.255.255.255 any
access-list 125 deny   ip 159.69.0.0 0.0.255.255 any
access-list 125 permit ip any 158.228.0.0 0.0.255.255
access-list 125 permit ip 158.228.0.0 0.0.255.255 any
access-list 125 deny   ip any host 64.239.142.214
access-list 125 deny   ip host 64.239.142.214 any
access-list 125 permit ip any any
!
snmp-server engineID local 0000000902000050547D0984
snmp-server community tierzero RO
!
tacacs-server host 216.116.96.47
tacacs-server timeout 10
tacacs-server directed-request
tacacs-server key 7 01040E554F58165F2F5501
!
control-plane
!
 !
 !
 !
 !
!
banner motd ^CCCCCCCCCCCCCCCCC
*************************************************************
Tierzero:
Unauthorized access to this device or the attached
networks is prohibited without express written permission.
Violators may be prosecuted to the fullest extent of the law.
Phone: 213-784-1400 option 1
Email: [tac@tierzero.net]
*********TACACS+*************************
^C
!
line con 0
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 access-class 25 in
line vty 5 15
 access-class 25 in
!
ntp server 204.152.184.72
ntp server 216.31.128.192
ntp server 216.116.96.3
!
end