MSR50_Core>dis cur
#
version 5.20, Release 1618, Standard
#
sysname MSR50_Core
#
clock timezone cst minus 05:00:00
#
ftp server enable
#
domain default enable system
#
ppp mp user 3com bind Virtual-Template 1 **set ppp mp user and bind to virtual template **
#
telnet server enable
#
acl number 2000
description ACL_to_Limit_Telnet
Access_to_Mgmt_Interface
rule 0 permit source 10.0.0.0 0.0.0.255
rule 5 permit source 151.104.0.0 0.0.255.255
rule 5 comment allow access from 3COM SE only
from 3COM internal network
rule 10 permit source 172.16.0.0 0.0.0.255
rule 15 permit source 12.xx.xx.0 0.0.0.255
rule 15 comment allow access from x506
internal network
#
vlan 1
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
local-user xxxx
password cipher /Y=+_F%SX`aQ=^Q`MAF4xxx
service-type ssh telnet terminal
level 3
local-user xxxx
password cipher /!5@\_XQQ.[=#.-&B_Axxx
service-type ssh telnet terminal
level 3
#
interface Aux0
async mode flow
link-protocol ppp
#
interface
Serial1/0 **set protocol to ppp and bind interface to virtual template **
link-protocol ppp
ppp mp Virtual-Template 1
description AT&T T1 - 25-HCGS-xxxx
#
interface Serial2/0
link-protocol ppp
ppp mp Virtual-Template 1
description AT&T T1 - 25-HCGS-xxxx
#
interface Serial3/0
link-protocol ppp
ppp mp Virtual-Template 1
description AT&T T1 - 25-HCGS-xxxx
#
interface Serial4/0
link-protocol ppp
ppp mp Virtual-Template 1
description AT&T T1 - 25-HCGS-xxxx
#
interface
Virtual-Template1 **Creates virtual interface template and set max T1 binding
to 4
ppp mp max-bind 4
ppp mp min-fragment 1450 **Set min fragment
& mtu - needed to make MLPPP work with
certain
web site correctly
mtu 1450
ip address 12.xx.xx.xx 255.255.255.252
qos wfq precedence queue-length 64
queue-number 256 **basic qos **
#
interface NULL0
#
interface
GigabitEthernet0/0
port link-mode route
description LAN_Interface_to_TP_X506
ip address 12.xx.xx.xx 255.255.255.0
tcp mss 1344 **Tune MSS to work with MLPPP **
qos wfq precedence queue-length 64
queue-number 256
#
interface
GigabitEthernet0/1
port link-mode route
#
interface Encrypt11/0
#
ip route-static 0.0.0.0 0.0.0.0 12.89.127.57
ip route-static 10.0.0.0 255.255.255.0
12.232.143.254
ip route-static 172.16.0.0 255.255.255.0
12.232.143.254
#
header login %
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! This is a secure site.... Only authorized users allowed. !!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
%
#
ntp-service source-interface Virtual-Template1
ntp-service unicast-server 130.126.24.53
#
user-interface con 0
authentication-mode scheme
user-interface aux 0
user-interface vty 0
4
acl 2000 inbound
authentication-mode scheme
#
return
<MSR50_Core>
No comments:
Post a Comment