version 15.2 service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption service sequence-numbers service counters max age 5 ! hostname GREE-VPN ! boot-start-marker boot-end-marker ! ! enable password 7 ****** ! no aaa new-model clock timezone JST 9 0 ! no ip source-route ip cef ! ! ! ! ! ! ! ! no ip domain lookup ip domain name janog ipv6 unicast-routing ipv6 cef multilink bundle-name authenticated ! ! ! ! license udi pid C3900-SPE200/K9 sn ****** license boot module c3900e technology-package datak9 ! ! username janog privilege 15 secret 4 ****** ! redundancy ! ! ip ssh version 2 csdb tcp synwait-time 30 csdb tcp idle-time 3600 csdb tcp finwait-time 5 csdb tcp reassembly max-memory 1024 csdb tcp reassembly max-queue-length 16 csdb udp idle-time 30 csdb icmp idle-time 10 csdb session max-session 65535 ! ! ! ! interface Tunnel0 no ip address ipv6 address 2400:8700:31:FFFE::2/126 ipv6 enable tunnel source 157.112.199.253 tunnel mode ipv6ip tunnel destination 220.111.132.3 ! interface Tunnel1 ip address 157.112.199.246 255.255.255.252 tunnel source 157.112.199.253 tunnel destination 220.111.132.3 ! interface GigabitEthernet0/0 ip address 157.112.199.250 255.255.255.252 secondary ip address 157.112.199.253 255.255.255.252 no ip redirects no ip unreachables no ip proxy-arp no ip route-cache load-interval 30 duplex auto speed auto ipv6 address 2400:8700:31:FFFF::1/126 ipv6 address 2400:8700:31:FFFF::6/126 ipv6 enable ! interface GigabitEthernet0/1 no ip address duplex auto speed auto ! interface GigabitEthernet0/2 no ip address duplex auto speed auto ! interface GigabitEthernet0/3 no ip address duplex auto speed auto ! ! ip forward-protocol nd ! no ip http server no ip http secure-server ! ip route 0.0.0.0 0.0.0.0 157.112.199.249 ip route 157.112.198.0 255.255.254.0 Tunnel1 157.112.199.245 ! access-list 10 remark === VTY-JANOG === access-list 10 permit 220.111.132.3 access-list 10 permit 116.93.153.221 access-list 10 remark === VTY-GREE === access-list 10 permit 116.93.149.54 access-list 20 remark === SNMP-JANOG === access-list 20 permit 220.111.132.3 access-list 20 remark === SNMP-GREE === access-list 20 permit 202.32.106.233 access-list 30 remark === NTP === access-list 30 permit 210.173.160.27 access-list 30 permit 210.173.160.57 ipv6 route 2400:8700:31::/48 2400:8700:31:FFFE::1 ipv6 route ::/0 2400:8700:31:FFFF::5 ! ! snmp-server community ****** RO snmp-server ifindex persist snmp-server enable traps entity-sensor threshold ! control-plane ! ! ! line con 0 line aux 0 line vty 0 4 access-class 10 in exec-timeout 30 0 login local exec prompt timestamp transport input telnet ssh transport output ssh line vty 5 15 no login no exec transport input none ! scheduler allocate 20000 1000 ntp server 210.173.160.57 ntp server 210.173.160.27 ! end GREE-VPN#