hostname sid
buggy
password-encrypt $v10$czNjcjN0
enable $V10$LmUbNUUefDFvI3E6XXkWBU4uX3V1JHM3ZGRHEnJQESRJTQZ0MxQ3dDk2Iks3J2xbmoBU5FUKnZ2TeM5wjTkv6kckltWXdlCgjoLmByDO
banner encoded  
!
logging milliseconds
logging buffered debug 10240
logging file debug zzz.log
logging syslog debug system 10.10.10.10 10.10.10.4
logging irc debug irc.mchome.nop.hu #routers
!
crypto rsakey rsa import $w10$ 
!
crypto dsakey dsa import $w10$ 
!
crypto ecdsakey ecdsa import $w10$N3OLUiq1x+Jok7NWfAzVIVI3eVUquH4ToWzkAx73xvqx/eRdznuSwWXSoCrbKEA4aw4/mogfgEXbiEXunbIrVUx857RvCyetdoKgPCZDWpTws74TTNdA6NCZGUnC1L7QhbrhBKvMuTNf4/6VPlUWiw==
!
crypto certificate dsa import dsa dsa $w10$ 
!
crypto certificate ecdsa import ecdsa ecdsa $w10$N3+TUyigweVfo7FmaVrKFUE7TXQsp0ko2FfLCnKF8Nqgx4kixw6ax2bBmDXZLUgwZw0LqKprh3P+kjCNlrkBR2hfk7pdPlO7QpqgfBImYdLGydkVMttZjfqUP3ncwcqVyO6wfOam7AIIi53bcy9T/Dn5I4aeuWnAHL8tGyXo1MzjExpt2OUBGWlMEfmC69EsvvEUWV2azDNuYi3tc1iiOFpT8D/0gQh6qF9h++a/6/Wvj0SKrxKzUJz2L+xKEmxpKe84QwqbnCURrbnWMt388AD6yUgyEbxU/aijYHVSFcLS5N9Um/Bv4HizyTk1RYNMl2gH66vu8DmMWosIH8F4IyywmuTJLpMkyu8ACjvuSy5raETb0zfcdQRglC3sy2v1Szd1hemduGPaFD6WPHFPfCDnDG92ic0f3NmaeBf6bxC3GaSEYkM/IUehv8twOLM7QEa7obmrryaNlB6Ye4OVw324oiKq7lq4Qs/swJpXh4Q=
!
crypto certificate rsa import rsa rsa $w10$ 
!
aaa userlist access
 username *
 username * anypass
 username * privilege 1
 username mc36
 username mc36 password $w10$HFepawSJgqct0vAiKD2PVg==
 allowed show .*
 allowed configure terminal
 allowed interface .*
 allowed description .*
 exit
!
aaa radius rad
 secret $w10$GV+pcgTkgqct0vAiKD2PVg==
 server 10.10.10.227
 exit
!
aaa tacacs tac
 secret $w10$GV+pcgTkgqct0vAiKD2PVg==
 server 10.10.10.227
 exit
!
script logger
 sequence 10 exec "test logging info someone from $remote hit the script"
 stop
 exit
!
prefix-list all
 sequence 10 permit 0.0.0.0/0 ge 0 le 32
 sequence 20 permit ::/0 ge 0 le 128
 exit
!
route-map count4
 sequence 10 action permit
 sequence 10 match network 0.0.0.0/0 ge 32 le 32
 !
 exit
!
route-map count6
 sequence 10 action permit
 sequence 10 match network ::/0 ge 128 le 128
 !
 exit
!
route-policy nht4
 sequence 10 if network 0.0.0.0/0 ge 0 le 0
 sequence 20   drop
 sequence 30 elsif distance 70
 sequence 40   pass
 sequence 50 elsif distance 0
 sequence 60   pass
 sequence 70 enif
 exit
!
route-policy nht6
 sequence 10 if network ::/0 ge 0 le 0
 sequence 20   drop
 sequence 30 elsif distance 70
 sequence 40   pass
 sequence 50 elsif distance 0
 sequence 60   pass
 sequence 70 enif
 exit
!
bundle 1
 loadbalance all
 exit
!
bridge 1
 rd 65535:1
 rt-import 65535:1
 rt-export 65535:1
 mac-learn
 private-bridge
 exit
!
bridge 2
 rd 65535:2
 rt-import 65535:2
 rt-export 65535:2
 mac-learn
 private-bridge
 exit
!
bridge 3
 rd 65535:1
 rt-import 65535:1
 rt-export 65535:1
 mac-learn
 private-bridge
 exit
!
bridge 4
 rd 65535:2
 rt-import 65535:2
 rt-export 65535:2
 mac-learn
 private-bridge
 exit
!
vrf definition bvi
 rd 65535:2
 label-mode per-prefix
 exit
!
vrf definition dn42
 rd 65535:42
 rt-import 65535:42
 rt-export 65535:42
 mdt4
 mdt6
 exit
!
vrf definition rtbh
 rd 65535:666
 rt-import 65535:666
 rt-export 65535:666
 exit
!
vrf definition v1
 rd 1:1
 rt-import 1:1
 rt-export 1:1
 counter4map count4
 counter6map count6
 exit
!
vrf definition v2
 rd 1:2
 rt-import 1:2
 rt-export 1:2
 label-mode per-prefix
 exit
!
vrf definition v3
 rd 1:3
 rt-import 1:3
 rt-export 1:3
 label-mode per-prefix
 exit
!
vrf definition v4
 rd 1:4
 rt-import 1:4
 rt-export 1:4
 label-mode per-prefix
 exit
!
vrf definition v5
 rd 1:5
 rt-import 1:5
 rt-export 1:5
 label-mode per-prefix
 exit
!
vrf definition v6
 rd 1:6
 rt-import 1:6
 rt-export 1:6
 label-mode per-prefix
 exit
!
vrf definition v7
 rd 1:7
 rt-import 1:7
 rt-export 1:7
 label-mode per-prefix
 exit
!
vrf definition v8
 rd 1:8
 rt-import 1:8
 rt-export 1:8
 label-mode per-prefix
 exit
!
vrf definition v9
 rd 1:9
 rt-import 1:9
 rt-export 1:9
 label-mode per-prefix
 exit
!
vrf definition vpn
 rd 65535:1
 rt-import 65535:1
 rt-export 65535:1
 label-mode per-prefix
 mdt4
 mdt6
 exit
!
router blackhole4 1
 vrf rtbh
 exit
!
router blackhole6 1
 vrf rtbh
 exit
!
router lsrp4 1
 vrf v1
 router-id 10.10.10.227
 refresh 600000
 lifetime 2147483000
 spf-log 500
 spf-bidir
 spf-ecmp
 suppress-prefix
 segrout 300 39
 bier 256 300 39
 justadvert loopback0
 ecmp
 exit
!
router lsrp6 1
 vrf v1
 router-id 10.10.10.227
 refresh 600000
 lifetime 2147483000
 spf-log 500
 spf-bidir
 spf-ecmp
 suppress-prefix
 segrout 300 39
 bier 256 300 39
 justadvert loopback0
 ecmp
 exit
!
router logger4 1
 vrf v1
 flapstat
 redistribute lsrp4 1
 exit
!
router logger4 65535
 vrf v1
 flapstat
 redistribute bgp4 65535
 exit
!
router logger6 1
 vrf v1
 flapstat
 redistribute lsrp6 1
 exit
!
router logger6 65535
 vrf v1
 flapstat
 redistribute bgp6 65535
 exit
!
interface template1
 description core links
 monitor-buffer 10240000
 lldp enable
 cdp enable
 cdp odr4 10.1.123.91
 cdp odr6 2001:db8:1123::91
 ptp enable
 ptp receive
 carrier-delay 123
 sgt enable
 vrf forwarding v1
 ipv4 address dynamic 255.255.255.252
 ipv4 host-watch appear logger change logger disappear logger
 ipv4 srh enable
 ipv4 ptp enable
 ipv4 ptp receive
 ipv4 bfd 1000 3000 3
 ipv4 pim enable
 ipv4 pim bier-tunnel 39
 ipv4 pim join-source loopback0
 ipv6 address dynamic ffff:ffff:ffff:ffff::
 ipv6 host-watch appear logger change logger disappear logger
 ipv6 srh enable
 ipv6 ptp enable
 ipv6 ptp receive
 ipv6 bfd 1000 3000 3
 ipv6 pim enable
 ipv6 pim bier-tunnel 39
 ipv6 pim join-source loopback0
 polka enable 39 70000 256
 mpolka enable 39 70000 256
 mpls enable
 mpls ldp4
 mpls ldp6
 mpls rsvp4
 mpls rsvp6
 router lsrp4 1 enable
 router lsrp4 1 dump lsrp4.log
 router lsrp4 1 accept-metric
 router lsrp4 1 dynamic-metric inband
 router lsrp4 1 bfd
 router lsrp4 1 dynamic-size 4
 router lsrp4 1 dynamic-ignore 2
 router lsrp6 1 enable
 router lsrp6 1 dump lsrp6.log
 router lsrp6 1 accept-metric
 router lsrp6 1 dynamic-metric inband
 router lsrp6 1 bfd
 router lsrp6 1 dynamic-size 4
 router lsrp6 1 dynamic-ignore 2
 shutdown
 no log-link-change
 exit
!
interface loopback0
 description management
 vrf forwarding v1
 ipv4 address 10.10.10.227 255.255.255.255
 ipv6 address 2001:db8:1101::227:227 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
 template template1
 no shutdown
 exit
!
interface loopback42
 description dn42.net
 vrf forwarding dn42
 ipv4 address 172.23.199.109 255.255.255.255
 ipv6 address fd40:cc1e:c0de::fffd ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
 no shutdown
 no log-link-change
 exit
!
interface loopback65535
 description vpn
 vrf forwarding vpn
 ipv4 address 172.16.27.4 255.255.255.255
 ipv6 address fd42:1234::4 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
 no shutdown
 no log-link-change
 exit
!
interface bundle1
 description uplink
 vrf forwarding v1
 ipv4 address 10.1.123.91 255.255.255.0
 ipv6 address 2001:db8:1123::91 ffff:ffff:ffff:ffff::
 template template1
 no shutdown
 exit
!
interface bvi1
 description vpn
 lldp enable
 cdp enable
 no shutdown
 no log-link-change
 exit
!
interface bvi2
 description vpn
 lldp enable
 cdp enable
 no shutdown
 no log-link-change
 exit
!
interface bvi3
 description vpn
 lldp enable
 cdp enable
 vrf forwarding bvi
 ipv4 address 172.16.26.4 255.255.255.0
 ipv6 address fd42:1235::4 ffff:ffff:ffff:ffff::
 no shutdown
 no log-link-change
 exit
!
interface bvi4
 description vpn
 lldp enable
 cdp enable
 no shutdown
 no log-link-change
 exit
!
interface ethernet1
 description uplink1
 bundle-group 1
 no shutdown
 no log-link-change
 exit
!
interface ethernet2
 description uplink2
 bundle-group 1
 no shutdown
 no log-link-change
 exit
!
interface ethernet8
 description hairpin
 lldp enable
 cdp enable
 no shutdown
 no log-link-change
 exit
!
interface ethernet9
 description hairpin
 lldp enable
 cdp enable
 no shutdown
 no log-link-change
 exit
!
router bgp4 65535
 vrf v1
 local-as 65535
 router-id 10.10.10.227
 safe-ebgp
 address-family unicast multicast ouni omlt flowspec oflw vpnuni vpnmlt vpnflw ovpnuni ovpnmlt ovpnflw vpls mspw evpn mdt nsh srte osrt linkstate mvpn omvpn
 flapstat
 monitor bmp p1 10.10.10.227 17971
 dump mrt bgp4.log
 template r remote-as 65535
 no template r description
 template r local-as 65535
 template r address-family unicast multicast ouni omlt flowspec oflw vpnuni vpnmlt vpnflw ovpnuni ovpnmlt ovpnflw vpls mspw evpn mdt nsh srte osrt linkstate mvpn omvpn
 template r distance 200
 template r connection-mode active
 template r compression both
 template r additional-path-rx unicast multicast vpnuni vpnmlt
 template r additional-path-tx unicast multicast vpnuni vpnmlt
 template r update-source loopback0
 template r monitor bmp
 template r dump mrt
 template r hostname domain
 template r extended-open
 template r extended-update
 template r aigp
 template r traffeng
 template r pmsitun
 template r tunenc
 template r attribset
 template r segrout
 template r bier
 template r role attrib
 template r send-community all
 neighbor 10.5.1.10 template r
 neighbor 10.26.26.2 template r
 afi-vrf dn42 enable
 afi-vrf dn42 mvpn loopback0
 afi-vrf dn42 redistribute connected
 afi-vrf dn42 redistribute static
 afi-vrf dn42 ecmp
 afi-vrf rtbh enable
 afi-vrf rtbh redistribute blackhole4 1
 afi-vrf vpn enable
 afi-vrf vpn mvpn loopback0
 afi-vrf vpn redistribute connected
 afi-vrf vpn redistribute static
 afi-vpls 65535:1 bridge-group 1
 afi-vpls 65535:1 update-source loopback0
 afi-evpn 2 bridge-group 2
 afi-evpn 2 bmac 006e.085c.1743
 afi-evpn 2 encapsulation pbb
 afi-evpn 2 update-source loopback0
 redistribute connected
 redistribute static
 ecmp
 exit
!
router bgp6 65535
 vrf v1
 local-as 65535
 router-id 10.10.10.227
 safe-ebgp
 address-family unicast multicast ouni omlt flowspec oflw vpnuni vpnmlt vpnflw ovpnuni ovpnmlt ovpnflw vpls mspw evpn mdt nsh srte osrt linkstate mvpn omvpn
 flapstat
 monitor bmp p1 2001:db8:1101::227:227 17971
 dump mrt bgp6.log
 template r remote-as 65535
 no template r description
 template r local-as 65535
 template r address-family unicast multicast ouni omlt flowspec oflw vpnuni vpnmlt vpnflw ovpnuni ovpnmlt ovpnflw vpls mspw evpn mdt nsh srte osrt linkstate mvpn omvpn
 template r distance 200
 template r connection-mode active
 template r compression both
 template r additional-path-rx unicast multicast vpnuni vpnmlt
 template r additional-path-tx unicast multicast vpnuni vpnmlt
 template r update-source loopback0
 template r monitor bmp
 template r dump mrt
 template r hostname domain
 template r extended-open
 template r extended-update
 template r aigp
 template r traffeng
 template r pmsitun
 template r tunenc
 template r attribset
 template r segrout
 template r bier
 template r role attrib
 template r send-community all
 neighbor 2001:db8:36::2 template r
 neighbor 2001:db8:1026:1001::2 template r
 afi-vrf dn42 enable
 afi-vrf dn42 mvpn loopback0
 afi-vrf dn42 redistribute connected
 afi-vrf dn42 redistribute static
 afi-vrf dn42 ecmp
 afi-vrf rtbh enable
 afi-vrf rtbh redistribute blackhole6 1
 afi-vrf vpn enable
 afi-vrf vpn mvpn loopback0
 afi-vrf vpn redistribute connected
 afi-vrf vpn redistribute static
 afi-vpls 65535:1 bridge-group 3
 afi-vpls 65535:1 update-source loopback0
 afi-evpn 2 bridge-group 4
 afi-evpn 2 bmac 0002.4276.7a16
 afi-evpn 2 encapsulation pbb
 afi-evpn 2 update-source loopback0
 redistribute connected
 redistribute static
 ecmp
 exit
!
proxy-profile dn42
 vrf dn42
 exit
!
proxy-profile p1
 vrf v1
 source loopback0
 exit
!
proxy-profile p2
 vrf v2
 exit
!
proxy-profile p3
 vrf v3
 exit
!
proxy-profile p4
 vrf v4
 exit
!
proxy-profile p5
 vrf v5
 exit
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
translation-rule 1
 remove %20
 remove -
 remove \(
 remove \)
 replace \+36 06
 match ^sip:(?<n>[0-9]+)@(?<d>.*)$
 match ^.*<sip:(?<n>[0-9]+)@(?<d>.*)>.*$
 match ^(?<n>[0-9]+)$
 text "
 variable n
 text "
 character 32
 text <sip:
 variable n
 text @10.10.10.10>
 log
 exit
!
translation-rule 2
 match .*
 text "96" <sip:97@10.10.10.10>
 exit
!
translation-rule 3
 match ^http://(?<d>.*)\.dn42.sid.mchome.nop.hu/(?<p>.*)$
 text http://
 variable d
 text .dn42/
 variable p
 log
 exit
!
translation-rule 4
 match ^http://(?<d>.*)\.inet.sid.mchome.nop.hu/(?<p>.*)$
 text http://
 variable d
 text /
 variable p
 log
 exit
!
dial-peer 1
 match-calling .*
 match-called .*
 translate-out-calling 2
 translate-out-called 1
 port-remote 6050
 keepalive 15000
 log
 history 10
 vrf v1
 source loopback0
 myname 97
 target 2001:db8:1101::10
 max-calls-in 99
 max-calls-out 99
 protocol sip-connect
 direction both
 exit
!
!
server telnet tel
 security authentication access
 security rsakey rsa
 security dsakey dsa
 security ecdsakey ecdsa
 access-log
 access-total 128
 access-subnet 16
 access-blackhole4 1
 access-blackhole6 1
 second-port 22
 exec timestamp
 exec colorize header
 exec tablemode table
 no exec authorization
 login authentication access
 login logging
 login last global
 vrf v1
 exit
!
server udptn ut
 no exec authorization
 no login authentication
 login logging
 vrf v1
 exit
!
server rfb vnc
 no exec authorization
 no login authentication
 login logging
 vrf v1
 exit
!
server http web
 security rsakey rsa
 security dsakey dsa
 security ecdsakey ecdsa
 security rsacert rsa
 security dsacert dsa
 security ecdsacert ecdsa
 access-log
 access-startup 10000
 access-total 128
 access-peer 16
 second-port 443
 host * path /nfs2/own/web/
 host * redir http://sid.mchome.nop.hu/
 host *.dn42.sid.mchome.nop.hu path /nfs2/own/web/
 host *.dn42.sid.mchome.nop.hu reconn dn42 http://www.nop.dn42/
 host *.dn42.sid.mchome.nop.hu translate 3
 host *.inet.sid.mchome.nop.hu path /nfs2/own/web/
 host *.inet.sid.mchome.nop.hu reconn p1 http://www.nop.hu/
 host *.inet.sid.mchome.nop.hu translate 4
 host sid.mchome.nop.hu path /nfs2/own/web/
 host sid.mchome.nop.hu style table, th, td { border: 1px solid }
 host sid.mchome.nop.hu logging
 host sid.mchome.nop.hu dirlist readme
 host sid.mchome.nop.hu markdown
 host sid.mchome.nop.hu noindex
 host sid.mchome.nop.hu script exec config
 host sid.mchome.nop.hu api exec config
 host sid.mchome.nop.hu websock
 host sid.mchome.nop.hu webdav
 host sid.mchome.nop.hu class
 vrf v1
 exit
!
server ftp f
 authentication access
 path /nfs/own/web/
 vrf v1
 exit
!
server tftp t
 path /nfs/own/web/
 vrf v1
 exit
!
server ntp n
 reference 0.0.0.0
 vrf v1
 exit
!
server bmp2mrt bmp
 file bmp.log
 bulk-down
 vrf v1
 exit
!
server dns ns
 logging
 recursion enable
 zone sid.mchome.nop.hu defttl 60
 zone sid.mchome.nop.hu axfr enable
 zone sid.mchome.nop.hu rr sid.mchome.nop.hu ip4a 10.10.10.227
 zone sid.mchome.nop.hu rr sid.mchome.nop.hu ns ns1.sid.mchome.nop.hu
 zone sid.mchome.nop.hu rr sid.mchome.nop.hu ns ns2.sid.mchome.nop.hu
 zone sid.mchome.nop.hu rr sid.mchome.nop.hu ns ns3.sid.mchome.nop.hu
 zone sid.mchome.nop.hu rr *.sid.mchome.nop.hu cname sid.mchome.nop.hu
 zone sid.mchome.nop.hu rr sid.mchome.nop.hu soa ns0.sid.mchome.nop.hu cs.sid.mchome.nop.hu 20210309 60000 120000 6000000 600
 zone sid.mchome.nop.hu rr sid.mchome.nop.hu ip6a 2001:db8:1101::227:227
 vrf v1
 exit
!
server honeypot hp
 port 666
 script logger
 vrf v1
 exit
!
server sip lab
 protocol ipv4 ipv6 tcp udp
 interface loopback0
 vrf v1
 exit
!
server radius rad
 authentication access
 secret $w10$GV+pcgTkgqct0vAiKD2PVg==
 logging
 vrf v1
 exit
!
server tacacs tac
 authentication access
 authorization access
 secret $w10$GV+pcgTkgqct0vAiKD2PVg==
 logging
 vrf v1
 exit
!
client proxy p1
client domain-name mchome.nop.hu
client prefer-ipv6
client password-stars
client whois-server whois.ripe.net
client name-server 10.10.10.10
client time-server www.mchome.nop.hu
client time-zone CET
client mail-server mail.mchome.nop.hu
!
end
