hostname Router
!
!
dot11 syslog
ip source-route
!
ip cef
!
!
ip dhcp excluded-address 192.168.70.1
ip dhcp excluded-address 192.168.70.65
ip dhcp excluded-address 10.10.30.1
ip dhcp excluded-address 192.168.70.2 192.168.70.10
ip dhcp excluded-address 192.168.70.66 192.168.70.70
ip dhcp excluded-address 192.168.72.1
!
ip dhcp pool voip
network 10.10.30.0 255.255.255.0
default-router 10.10.30.1
dns-server 10.10.30.1
option 150 ip 10.10.30.1
lease 0 8
!
ip dhcp pool guest_wifi
network 192.168.72.0 255.255.255.192
default-router 192.168.72.1
dns-server 192.168.70.10 8.8.8.8
lease 0 8
!
ip dhcp pool vpn
network 10.10.25.0 255.255.255.0
option 249 hex 1ac0.a846.000a.0a19.01
lease 0 8
!
!
no ip domain lookup
ip name-server 8.8.8.8
ip inspect name INSPECT_OUT icmp router-traffic
ip inspect name INSPECT_OUT tcp router-traffic
ip inspect name INSPECT_OUT udp router-traffic
ip inspect name INSPECT_OUT isakmp
ip inspect name INSPECT_OUT sip
login block-for 3600 attempts 2 within 10
login on-failure log every 5
login on-success log every 3
no ipv6 cef
!
multilink bundle-name authenticated
!
stcapp ccm-group 1
stcapp
!
!
!
async-bootp dns-server 192.168.70.1
vpdn enable
!
vpdn-group VPDN-PPTP
! Default PPTP VPDN group
accept-dialin
protocol pptp
virtual-template 1
pptp tunnel echo 10
l2tp tunnel timeout no-session 15
ip pmtu
ip mtu adjust
!
!
voice-card 0
!
!
!
voice service voip
allow-connections sip to sip
redirect ip2ip
sip
bind control source-interface GigabitEthernet0/0.419
bind media source-interface GigabitEthernet0/0.419
associate registered-number "Номер 1 линии"
no update-callerid
!
voice class codec 1
codec preference 1 g711alaw
codec preference 2 g711ulaw
codec preference 3 g729br8
!
!
!
!
voice translation-rule 1
rule 1 /.*/ /"Номер 1 линии"/
!
voice translation-rule 2
rule 1 /8\(..........\)/ /\1/
!
!
voice translation-profile OUT
translate calling 1
translate called 2
!
!
crypto pki token default removal timeout 0
!
!
!
!
license udi pid CISCO3825 sn FTX1237A1SJ
archive
log config
hidekeys
!
redundancy
!
!
ip ssh time-out 60
ip ssh version 1
!
crypto isakmp key ZxcvbnM address 0.0.0.0 0.0.0.0
!
!
crypto ipsec transform-set TS esp-3des esp-sha-hmac
!
crypto dynamic-map DM 10
set transform-set TS
match address ALZ
!
!
crypto map MAP 10 ipsec-isakmp dynamic DM
!
!
!
!
!
!
interface Loopback0
description - LO-PPTP -
ip address 10.10.25.1 255.255.255.0
!
interface Loopback123
ip address 192.168.71.1 255.255.255.0
!
interface GigabitEthernet0/0
description internet$FW_OUTSIDE$
ip address 212.23.*.* 255.255.255.252
ip access-group BLOCK_VOIP in
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
media-type rj45
no cdp enable
no mop enabled
!
interface GigabitEthernet0/0.419
encapsulation dot1Q 419
ip address 172.19.70.138 255.255.255.252
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
media-type rj45
no cdp enable
!
interface GigabitEthernet0/1.1
description lan_buh$FW_INSIDE$
encapsulation dot1Q 2
ip address 192.168.70.1 255.255.255.0
ip flow ingress
ip flow egress
ip nat inside
ip virtual-reassembly in
!
interface GigabitEthernet0/1.3
description VoIP$FW_INSIDE$
encapsulation dot1Q 30
ip address 10.10.30.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface GigabitEthernet0/1.4
description wi-fi_guest
encapsulation dot1Q 29
ip address 192.168.72.1 255.255.255.192
ip access-group guest_vlan in
ip nat inside
ip virtual-reassembly in
!
interface Virtual-Template1
description - PPTP -
ip unnumbered Loopback0
ip nat inside
ip virtual-reassembly in
autodetect encapsulation ppp
peer ip address forced
peer default ip address dhcp-pool vpn
ppp encrypt mppe auto
ppp authentication ms-chap-v2
!
ip forward-protocol nd
ip http server
ip http authentication local
no ip http secure-server
ip http path flash:
!
ip flow-export version 5
ip flow-export destination 192.168.70.8 9995
!
ip dns server
ip nat inside source list nat interface GigabitEthernet0/0 overload
ip nat inside source static tcp
!
ip access-list extended ALZ
permit ip 192.168.70.0 0.0.0.255 192.168.1.0 0.0.0.255
deny ip 192.168.70.0 0.0.0.255 any
ip access-list extended BLOCK_VOIP
deny udp any any eq 1720
deny tcp any any eq 1720
deny udp any any eq 5060
deny tcp any any eq 5060
deny tcp any any eq 5061
deny udp any any eq 5061
deny tcp any any eq 1723
permit ip any any
ip access-list extended guest_vlan
deny ip any 10.0.0.0 0.255.255.255
deny ip any 192.168.0.0 0.0.255.255
deny ip any 172.16.0.0 0.15.255.255
permit ip any any
ip access-list extended nat
deny ip 192.168.70.0 0.0.0.255 192.168.1.0 0.0.0.255
permit ip 192.168.70.0 0.0.0.255 any
!
logging esm config
!
!
!
!
!
tftp-server flash:apps42.8-5-3TH1-6.sbn
tftp-server flash:cnu42.8-5-3TH1-6.sbn
tftp-server flash:cvm42sccp.8-5-3TH1-6.sbn
tftp-server flash:dsp42.8-5-3TH1-6.sbn
tftp-server flash:jar42sccp.8-5-3TH1-6.sbn
tftp-server flash:SCCP42.8-5-3S.loads
tftp-server flash:term42.default.loads
tftp-server flash:term62.default.loads
tftp-server term11.default.loads
tftp-server term06.default.loads
tftp-server SCCP11.8-3-3SR2S.loads
tftp-server jar11sccp.8-3-3ES2.sbn
tftp-server dsp11.8-3-3ES2.sbn
tftp-server cvm11sccp.8-3-3ES2.sbn
tftp-server cnu11.8-3-3ES2.sbn
tftp-server apps11.8-3-3ES2.sbn
tftp-server flash:/ru-tc-sccp.jar alias Russian_Russia/tc-sccp.jar
tftp-server flash:/ru-mk-sccp.jar alias Russian_Russia/mk-sccp.jar
tftp-server flash:/g3-tones.xml alias Russian_Federation/G3-TONES.XML
tftp-server flash:BOOT69xx.0-0-0-14.zz.sgn
tftp-server flash:DSP69xx.0-0-0-4.zz.sgn
tftp-server flash:SCCP69xx.9-1-1-0.loads
tftp-server flash:SCCP69xx.9-1-1-0.zz.sgn
!
!
control-plane
!
!
voice-port 0/0/0
!
voice-port 0/0/1
!
voice-port 0/0/2
!
voice-port 0/0/3
!
ccm-manager music-on-hold
!
mgcp fax t38 ecm
!
mgcp profile default
!
sccp local GigabitEthernet0/1.3
sccp ccm 10.10.30.1 identifier 1 version 7.0
sccp
!
sccp ccm group 1
bind interface GigabitEthernet0/1.3
associate ccm 1 priority 1
!
dial-peer voice 103 voip
translation-profile outgoing o
preference 1
service session
max-conn 2
destination-pattern ^[2-3]......$
session protocol sipv2
session target ipv4:172.19.46.1
session transport udp
voice-class codec 1
dtmf-relay sip-notify
fax-relay ecm disable
clid network-number "Номер 1 линии"
!
dial-peer voice 105 voip
translation-profile outgoing o
preference 1
service session
max-conn 2
destination-pattern ^8[23456789].........$
session protocol sipv2
session target ipv4:172.19.46.1
session transport udp
voice-class codec 1
dtmf-relay rtp-nte
fax-relay ecm disable
clid network-number "Номер 1 линии"
!
dial-peer voice 107 voip
preference 1
service session
max-conn 2
destination-pattern 810.T
session protocol sipv2
session target ipv4:172.19.46.1
session transport udp
voice-class codec 1
dtmf-relay rtp-nte
fax-relay ecm disable
clid network-number "Номер 1 линии"
!
dial-peer voice 101 voip
preference 1
service session
max-conn 2
destination-pattern ^0[12349]$
session protocol sipv2
session target ipv4:172.19.46.1
session transport udp
voice-class codec 1
dtmf-relay rtp-nte
fax-relay ecm disable
clid network-number "Номер 1 линии"
!
dial-peer voice 201 pots
destination-pattern "Номер Факса (наверное)"
port 0/0/0
!
dial-peer voice 555 pots
destination-pattern 555
port 0/0/0
!
!
sip-ua
credentials username "Номер 1 линии" password 7 "Пароль" realm 172.19.46.1
credentials username "Номер 2 линии" password 7 "Пароль" realm 172.19.46.1
authentication username "Номер 1 линии" password 7 "Пароль"
no remote-party-id
registrar ipv4:172.19.46.1 expires 3600
sip-server ipv4:172.19.46.1
connection-reuse
host-registrar
!
!
!
telephony-service
max-ephones 50
max-dn 150
ip source-address 10.10.30.1 port 2000
service dnis overlay
service dnis dir-lookup
system message CME
url directories
10.10.30.1/localdirectory
cnf-file perphone
user-locale RU
network-locale RU
network-locale 1 RU
load 7911 SCCP11.8-3-3SR2S
load 7962 SCCP42.8-5-3S
load 6921 SCCP69xx.9-1-1-0
time-zone 40
time-format 24
date-format dd-mm-yy
max-conferences 12 gain -6
moh flash:music-on-hold.au
web admin system name admin password Eternity
dn-webedit
time-webedit
transfer-system full-consult
transfer-pattern .T
fac custom callfwd all **1
fac custom callfwd cancel *#1
fac custom pickup group **4
fac custom pickup direct **3
fac custom park **6
fac custom dnd **7
fac custom redial **8
fac custom alias 0 40 to **41
fac custom alias 1 44 to **42
create cnf-files version-stamp Jan 01 2002 00:00:00
!
!
!
!
ephone-hunt 1 sequential
pilot "Номер 1 линии"
list 500
final 500
preference 1
timeout 35
no-reg pilot
Сложный
Средний
