!RANCID-CONTENT-TYPE: cisco-clean ! ! ! ! ! version 15.1 service timestamps debug datetime msec localtime show-timezone year service timestamps log datetime msec localtime show-timezone year service password-encryption service sequence-numbers no platform punt-keepalive disable-kernel-core ! hostname 211LACounty_1GB_13KRGN608308PT_526WLasTunasDr ! boot-start-marker boot-end-marker ! vrf definition Mgmt-intf ! address-family ipv4 exit-address-family ! address-family ipv6 exit-address-family ! logging buffered 50000 informational logging persistent url flash:/syslog1 size 10485760 filesize 40000 immediate no logging console ! aaa new-model ! aaa authentication fail-message ^CCCCCCCCCCC****TACACS+************^C aaa authentication login default group tacacs+ local aaa authentication enable default group tacacs+ none ! aaa session-id common ! no process cpu extended history no process cpu autoprofile hog clock timezone PST -8 0 clock summer-time PST recurring ip source-route ! ip domain name tierzero.net ip name-server 216.116.96.2 ip name-server 216.116.96.3 ! track 1 ip sla 1 reachability delay down 10 up 30 ! multilink bundle-name authenticated ! archive log config logging enable logging persistent auto ! username tzcare privilege 15 secret 5 $1$QcDi$cx/mqm7rFUUwXiVU5g0OJ. ! redundancy mode none ! ip ssh version 2 ! class-map match-all BANDWIDTH match any ! policy-map BANDWIDTH_1GB class BANDWIDTH priority level 1 class class-default police rate 1000000000 burst 500000 conform-action transmit exceed-action drop policy-map BANDWIDTH_30MB class BANDWIDTH priority level 1 class class-default police rate 30000000 burst 500000 conform-action transmit exceed-action drop ! interface GigabitEthernet0/0/0 description 211LACounty=13KRGN608308PT no ip address load-interval 30 no negotiation auto service-policy output BANDWIDTH_1GB ! interface GigabitEthernet0/0/0.1 encapsulation dot1Q 2619 ip address 216.31.138.162 255.255.255.252 ip access-group 125 in ! interface GigabitEthernet0/0/1 description CustomerLAN ip address 64.239.163.129 255.255.255.128 load-interval 30 negotiation auto service-policy output BANDWIDTH_1GB ! interface GigabitEthernet0/0/2 description FixedWireless_13.HTXX.000021.CIS_Failover ip address 216.31.157.6 255.255.255.252 load-interval 30 speed 100 no negotiation auto service-policy output BANDWIDTH_30MB ! interface GigabitEthernet0/0/3 no ip address negotiation auto service-policy output BANDWIDTH_1GB ! interface GigabitEthernet0 vrf forwarding Mgmt-intf no ip address negotiation auto ! no ip http server no ip http secure-server ip route 0.0.0.0 0.0.0.0 216.31.138.161 track 1 ip route 0.0.0.0 0.0.0.0 216.31.157.5 150 name FixedWireless_Failover ! ip sla 1 icmp-echo 216.31.138.161 source-ip 216.31.138.162 frequency 30 timeout 30000 threshold 30000 ip sla schedule 1 life forever start-time now ip sla logging traps logging esm config access-list 25 permit 64.239.128.0 0.0.63.255 access-list 25 permit 66.6.208.0 0.0.15.255 access-list 25 permit 72.18.0.0 0.0.31.255 access-list 25 permit 208.179.0.0 0.0.255.255 access-list 25 permit 216.31.128.0 0.0.63.255 access-list 25 permit 216.116.96.0 0.0.31.255 access-list 25 deny any access-list 100 remark SPAMBLOCK access-list 100 deny tcp any any eq smtp access-list 100 deny tcp any any eq smtp log access-list 100 permit ip any any access-list 125 deny udp any any eq 25 access-list 125 deny tcp any any eq smtp access-list 125 permit ip any any ! snmp-server engineID local 0000000902000050547D0984 snmp-server community tierzero RO ! tacacs-server host 216.116.96.47 tacacs-server timeout 10 tacacs-server directed-request tacacs-server key 7 01040E554F58165F2F5501 ! control-plane ! banner motd ^CCCCCCCCCCCC ************************************************************* Tierzero: Unauthorized access to this device or the attached networks is prohibited without express written permission. Violators may be prosecuted to the fullest extent of the law. Phone: 213-784-1400 option 1 Email: [tac@tierzero.net] *********TACACS+************************* ^C ! line con 0 stopbits 1 line aux 0 stopbits 1 line vty 0 4 access-class 25 in transport input all ! ntp server 204.152.184.72 ntp server 216.31.128.192 ntp server 216.116.96.3 end