========================
© PRUEBAS DEL CPE
========================

<UNID_PC_UNQ9999_PPAL>dis current-configuration 
[V200R007C00SPC900]
#
 sysname UNID_PC_UNQ9999_PPAL
 header login information "
*************************************************************
* ATENCION: Este equipo es propiedad de CLARO COLOMBIA      *
* El uso no autorizado esta estrictamente prohibido.        *
*                                                           *
* Todos los usuarios son legalmente responsables de sus     *
* acciones sobre el sistema y toda actividad sera registrada*
*************************************************************
"
#
 drop illegal-mac alarm
#
 clock timezone 5 add 05:00:00
#
ipv6
#
hwtacacs-server template claro
 hwtacacs-server authentication 100.123.26.46 weight 80
 hwtacacs-server authorization 100.123.26.46 weight 80
 hwtacacs-server accounting 100.123.26.46 weight 80
 hwtacacs-server source-ip 10.161.122.26
 hwtacacs-server shared-key cipher %^%#lF7R.qgZGJE.MF5@-CgLKzsd6Y]eT3&/B!=@j*hA%^%#
#
pki realm default
 enrollment self-signed
#
ssl policy default_policy type server
 pki-realm default
#
acl number 2300  
 rule 1 permit source 172.22.0.0 0.0.255.255 
 rule 2 permit source 172.31.238.0 0.0.0.255 
 rule 3 permit source 172.31.239.0 0.0.0.255 
 rule 4 permit source 10.161.122.24 0.0.0.3 
 rule 6 permit source 172.238.0.0 0.0.0.255 
 rule 7 permit source 172.239.0.0 0.0.0.255 
 rule 10 permit source 100.123.0.0 0.0.1.255 
 rule 15 permit source 172.18.0.0 0.0.255.255 
acl number 2400  
 rule 1 permit 
#
aaa
 authentication-scheme default
 authentication-scheme l-h
  authentication-mode hwtacacs local
 authorization-scheme default
 authorization-scheme hwtacacs
  authorization-mode  hwtacacs local
  authorization-cmd 3 hwtacacs local
  authorization-cmd 15 hwtacacs local
 accounting-scheme default
 accounting-scheme hwtacacs
  accounting-mode hwtacacs
  accounting realtime 3
  accounting start-fail online
 domain default
  authorization-scheme default
 domain default_admin
  authentication-scheme l-h
  accounting-scheme hwtacacs
  authorization-scheme hwtacacs
  hwtacacs-server claro
 local-aaa-user wrong-password retry-interval 6 retry-time 4 block-time 6
 local-user admin password irreversible-cipher %^%#n|`Q._2f}UOOhP=Y20f"4M%GCtUG[<CO:l6[@A`UMj9|<1*FU7`gj9L+2Rn;%^%#
 local-user admin privilege level 15
 local-user admin service-type telnet terminal ssh
 local-user telmexuser password irreversible-cipher %^%#bi<4Dh4;u'Mn`Z14}jm){``):Gc1zTP/To<DS&_P`[N2,OMC[1j<TlA[0ZV6%^%#
 local-user telmexuser privilege level 15
 local-user telmexuser service-type telnet terminal ssh
#
firewall zone Local
 priority 128
#
interface Vlanif1
#
interface GigabitEthernet0/0/0
 description --- LAN INTRANET - UNQ9999 ---
 ipv6 enable
 ip address 172.20.0.4 255.255.255.0
 ipv6 address 2801:1B2:20::3/64
 vrrp vrid 5 virtual-ip 172.20.0.4
 vrrp vrid 5 priority 110
 vrrp vrid 5 preempt-mode timer delay 5
 vrrp vrid 5 track interface GigabitEthernet0/0/1.2570 reduced 20
 vrrp6 vrid 5 virtual-ip FE80::1 link-local
 vrrp6 vrid 5 virtual-ip 2801:1B2:20::4
 vrrp6 vrid 5 priority 120
 combo-port auto
#
interface GigabitEthernet0/0/1
 combo-port auto
#
interface GigabitEthernet0/0/1.2570
 description --- WAN INTRANET - PC_UNQ9999 ---
 dot1q termination vid 2570
 ipv6 enable
 ip address 10.161.122.26 255.255.255.252
 ipv6 address 2800:483:2080:58::16/126
 ipv6 neighbor 2800:483:2080:58::15 40ce-242c-6db4 vid 2570
#
interface GigabitEthernet0/0/2
 ip address 192.168.1.1 255.255.255.0
#
interface GigabitEthernet0/0/3
 description VirtualPort
#
interface Cellular0/0/0
#
interface Cellular0/0/1
#
interface NULL0
#
bgp 64646
 group 1 external
 peer 10.161.122.25 as-number 14080
 peer 10.161.122.25 group 1
 peer 10.161.122.25 timer keepalive 10 hold 30
 group 2 internal
 peer 172.20.0.5 as-number 64646
 peer 172.20.0.5 group 2
 peer 172.20.0.5 timer keepalive 10 hold 30
 group 3 external
 peer 2800:483:2080:58::15 as-number 14080
 peer 2800:483:2080:58::15 group 3
 peer 2800:483:2080:58::15 timer keepalive 10 hold 30
 #
 ipv4-family unicast
  undo synchronization
  network 0.0.0.0
  network 172.16.3.0 255.255.255.0
  network 172.16.20.0 255.255.255.0
  network 172.16.21.0 255.255.255.0
  network 172.16.22.0 255.255.255.0
  network 172.16.23.0 255.255.255.0
  network 172.16.24.0 255.255.255.0
  network 172.16.30.0 255.255.255.0
  network 172.16.49.0 255.255.255.0
  network 172.16.50.0 255.255.254.0
  network 172.16.51.0 255.255.255.0
  network 172.16.60.0 255.255.255.0
  network 172.16.61.0 255.255.255.0
  network 172.16.80.0 255.255.255.0
  network 172.16.90.0 255.255.255.0
  network 172.16.110.0 255.255.255.0
  network 172.17.1.0 255.255.255.0
  network 172.17.2.0 255.255.255.0
  network 172.20.0.0 255.255.255.0
  peer 1 enable
  peer 10.161.122.25 enable
  peer 10.161.122.25 group 1
  peer 2 enable
  peer 172.20.0.5 enable
  peer 172.20.0.5 group 2
  peer 172.20.0.5 route-policy BACKUP import
  peer 172.20.0.5 next-hop-local
  peer 3 enable
 #
 ipv6-family unicast
  undo synchronization
  network :: 0
  network 2800:483:2080:58:: 64
  network 2801:1B2:0:3:: 64
  network 2801:1B2:0:20:: 64
  network 2801:1B2:0:20:: 125
  network 2801:1B2:0:21:: 64
  network 2801:1B2:0:22:: 64
  network 2801:1B2:0:23:: 64
  network 2801:1B2:0:24:: 64
  network 2801:1B2:0:30:: 64
  network 2801:1B2:0:50:: 64
  network 2801:1B2:0:51:: 64
  network 2801:1B2:0:60:: 64
  network 2801:1B2:0:61:: 64
  network 2801:1B2:0:80:: 64
  network 2801:1B2:0:90:: 64
  network 2801:1B2:0:110:: 64
  network 2801:1B2:17:1:: 64
  network 2801:1B2:17:2:: 64
  network 2801:1B2:20:: 64
  import-route static
  peer 3 enable
  peer 2800:483:2080:58::15 enable
  peer 2800:483:2080:58::15 group 3
#
route-policy BACKUP permit node 1
 if-match acl 2400
 apply local-preference 50
#
cpu-defend policy devicesafety
 description defend_arp_attack
 packet-type arp-request rate-limit 256
 auto-defend enable
 auto-defend threshold 50
 auto-defend alarm enable
 auto-defend alarm threshold 50
cpu-defend policy mypolicy
 packet-type arp-reply rate-limit 256
#
 cpu-defend-policy devicesafety
#
 snmp-agent local-engineid 800007DB03488EEF6C158D
 snmp-agent community read %^%#JjDL%nQI]V:5*=&gk($UhtK~F8^N';rPm$MM^-UGnw!'A].s[OuyV=Tn4>k91V5CZ!<"M"%-Dj!;QoiL%^%# acl 2300 
 snmp-agent community write %^%#@sE\U*Cmn.p5q*T~aT3Z82zYKcB$mV;nl^CN2acYUy'%-U][*.^:tY/;eIV#c3)p2t<5j5Ce}|BH,1y'%^%# acl 2300 
 snmp-agent sys-info version v2c
 snmp-agent 
#
 stelnet server enable 
 telnet server enable 
#
 http secure-server ssl-policy default_policy
 http secure-server enable
#
ip route-static 0.0.0.0 0.0.0.0 172.20.0.2
ip route-static 172.16.3.0 255.255.255.0 172.20.0.2
ip route-static 172.16.20.0 255.255.255.0 172.20.0.2
ip route-static 172.16.21.0 255.255.255.0 172.20.0.2
ip route-static 172.16.22.0 255.255.255.0 172.20.0.2
ip route-static 172.16.23.0 255.255.255.0 172.20.0.2
ip route-static 172.16.24.0 255.255.255.0 172.20.0.2
ip route-static 172.16.30.0 255.255.255.0 172.20.0.2
ip route-static 172.16.49.0 255.255.255.0 172.20.0.2
ip route-static 172.16.50.0 255.255.254.0 172.20.0.2
ip route-static 172.16.51.0 255.255.255.0 172.20.0.2
ip route-static 172.16.56.0 255.255.255.0 172.20.0.2
ip route-static 172.16.60.0 255.255.255.0 172.20.0.2
ip route-static 172.16.61.0 255.255.255.0 172.20.0.2
ip route-static 172.16.80.0 255.255.255.0 172.20.0.2
ip route-static 172.16.90.0 255.255.255.0 172.20.0.2
ip route-static 172.16.110.0 255.255.255.0 172.20.0.2
ip route-static 172.17.1.0 255.255.255.0 172.20.0.2
ip route-static 172.17.2.0 255.255.255.0 172.20.0.2
ip route-static 172.20.0.0 255.255.255.0 172.20.0.2
#
ipv6 route-static :: 0 2801:1B2:20::2
ipv6 route-static 2801:1B2:0:3:: 64 2801:1B2:20::2
ipv6 route-static 2801:1B2:0:20:: 64 2801:1B2:20::2
ipv6 route-static 2801:1B2:0:21:: 64 2801:1B2:20::2
ipv6 route-static 2801:1B2:0:22:: 64 2801:1B2:20::2
ipv6 route-static 2801:1B2:0:23:: 64 2801:1B2:20::2
ipv6 route-static 2801:1B2:0:24:: 64 2801:1B2:20::2
ipv6 route-static 2801:1B2:0:30:: 64 2801:1B2:20::2
ipv6 route-static 2801:1B2:0:50:: 64 2801:1B2:20::2
ipv6 route-static 2801:1B2:0:51:: 64 2801:1B2:20::2
ipv6 route-static 2801:1B2:0:56:: 64 2801:1B2:20::2
ipv6 route-static 2801:1B2:0:60:: 64 2801:1B2:20::2
ipv6 route-static 2801:1B2:0:61:: 64 2801:1B2:20::2
ipv6 route-static 2801:1B2:0:80:: 64 2801:1B2:20::2
ipv6 route-static 2801:1B2:0:90:: 64 2801:1B2:20::2
ipv6 route-static 2801:1B2:0:110:: 64 2801:1B2:20::2
ipv6 route-static 2801:1B2:17:1:: 64 2801:1B2:20::2
ipv6 route-static 2801:1B2:17:2:: 64 2801:1B2:20::2
#
nqa test-instance SLA 10
 test-type icmp
 destination-address ipv4 10.161.122.25
 frequency 20
 ttl 10
 start now
#
user-interface con 0
 authentication-mode aaa
user-interface vty 0 4
 acl 2300 inbound
 authentication-mode aaa
 user privilege level 15
 screen-length 0
#
wlan ac
#
voice 
 #
 diagnose
#
ops
#
autostart
#
return
<UNID_PC_UNQ9999_PPAL>     
<UNID_PC_UNQ9999_PPAL>
