!

! Last configuration change at 01:18:19 COL Mon Oct 5 2009 by julian-espinosa

! NVRAM config last updated at 01:15:04 COL Wed Oct 7 2009 by julian-espinosa
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R_BS_040
!
boot-start-marker
boot system flash c2801-adventerprisek9-mz.124-15.T8.bin
boot-end-marker
!
logging message-counter syslog
logging buffered 4096
logging monitor informational
enable secret 5 $1$sMwA$TRnp3ZZBXke2QXvFvYxye1
!
aaa new-model
!
!
aaa authentication login default group tacacs+ local
aaa authorization config-commands
aaa authorization exec default group tacacs+ local
aaa authorization commands 0 default group tacacs+ local
aaa authorization commands 1 default group tacacs+ local
aaa authorization commands 15 default group tacacs+ local
!
!
aaa session-id common
clock timezone COL -5
!
!
dot11 syslog
ip source-route
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 180.169.230.193 180.169.230.198
!
ip dhcp pool voip
network 180.169.230.192 255.255.255.192
default-router 180.169.230.193
option 150 ip 180.168.58.134 180.168.58.135
lease 5
!
!
ip cef
no ip domain lookup
ip host MODEM 180.168.97.129
no ipv6 cef
!
multilink bundle-name authenticated
!
!
isdn switch-type basic-net3
!
!
trunk group bancosantander
carrier-id santander
!
!
!
voice service voip
allow-connections h323 to sip
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
dsp services dspfarm
!
!
application
global
service alternate Default
!
!
!
!
username CCM-App privilege 15 secret 5 $1$RGcb$QrONSAC7gufYYvyQCmx36/
username gestioncw privilege 15 password 0 G35ti0nbsItl.
username COL-CGEDCTDC privilege 15 password 0 COL-CGEDCTDC
!
!
crypto isakmp policy 10
encr aes
authentication pre-share
group 2
crypto isakmp key 3l_v4l0r_d3_l4s_1d34s address 192.168.241.17
crypto isakmp key 3l_v4l0r_d3_l4s_1d34s address 192.168.241.18
!
!
crypto gdoi group getvpn
identity number 2030
server address ipv4 192.168.241.17
server address ipv4 192.168.241.18
!
!
crypto map getvpn-map local-address Loopback400
crypto map getvpn-map 10 gdoi
set group getvpn
match address Sin-encriptacion-ACL
!
archive
log config
hidekeys
!
!
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh version 2
!
class-map match-all marc-oro
match access-group 150
class-map match-all marc-plata
match access-group 151
class-map match-all voz
match dscp ef
class-map match-all plata
match dscp af11
class-map match-all oro
match dscp af21
!
!
policy-map ip-wan-qos
class oro
bandwidth 64
class plata
bandwidth 256
class voz
priority 64
class class-default
bandwidth 128
policy-map shape-512k
class class-default
shape peak 512000
service-policy ip-wan-qos
policy-map marcacion-ip
class marc-oro
set dscp af21
class marc-plata
set dscp af11
class class-default
set dscp default
policy-map ip-wan-qos-1536k
class oro
bandwidth 256
class plata
bandwidth 768
class voz
priority 128
police cir 128000
class class-default
bandwidth 384
policy-map shape-1536
class class-default
shape peak 1536000
service-policy ip-wan-qos-1536k
!
!
!
!
!
interface Loopback400
description GESTION TELEFONICA
ip address 172.21.50.42 255.255.255.255
!
interface Loopback500
description GESTION_SIGRES_CORPORATIVO
ip address 172.19.11.119 255.255.255.255
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.3
description IP LAN Datos
encapsulation dot1Q 3
ip address 180.168.97.129 255.255.255.224
ip helper-address 180.168.94.21
!
interface FastEthernet0/0.199
description IP LAN Voz
encapsulation dot1Q 199
ip address 180.169.230.193 255.255.255.192
!
interface Service-Engine0/0
ip unnumbered FastEthernet0/0.199
service-module ip address 180.169.230.195 255.255.255.192
service-module ip default-gateway 180.169.230.193
!
interface FastEthernet0/1
description WAN_MPLS
bandwidth 512
ip address 192.168.230.134 255.255.255.252
load-interval 30
duplex auto
speed auto
no cdp enable
crypto map getvpn-map
service-policy output shape-512k
!
interface FastEthernet0/3/0
switchport access vlan 50
bandwidth 1536
load-interval 30
service-policy output shape-1536
!
interface FastEthernet0/3/1
!
interface FastEthernet0/3/2
!
interface FastEthernet0/3/3
!
interface BRI0/2/0
no ip address
encapsulation hdlc
shutdown
isdn switch-type basic-net3
isdn point-to-point-setup
!
interface Vlan1
no ip address
!
interface Vlan50
 description WAN_MPLS_TELECOM_AFA OT0000013282
ip address 192.168.231.218 255.255.255.252
crypto map getvpn-map
!
router ospf 1
log-adjacency-changes
network 172.21.50.42 0.0.0.0 area 1
network 172.28.0.41 0.0.0.0 area 1
network 180.168.97.128 0.0.0.31 area 1
network 192.168.230.132 0.0.0.3 area 1
!
router bgp 64520
no synchronization
bgp log-neighbor-changes
network 180.168.97.128 mask 255.255.255.224
network 180.169.230.192 mask 255.255.255.192
redistribute connected route-map REDES
neighbor 192.168.230.133 remote-as 3816
neighbor 192.168.230.133 version 4
neighbor 192.168.230.133 route-map REDES_OUT_BCK out
neighbor 192.168.231.217 remote-as 3816
neighbor 192.168.231.217 version 4
neighbor 192.168.231.217 route-map REDES_OUT_PPAL out
no auto-summary
!
ip forward-protocol nd
ip route 180.169.230.195 255.255.255.255 Service-Engine0/0
no ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
!
!
ip tacacs source-interface Loopback400
!
ip access-list standard SNMPCW
permit 180.168.58.142
permit 180.168.58.143
permit 180.168.58.141
!
ip access-list extended Sin-encriptacion-ACL
deny esp any any
deny tcp any any eq tacacs
deny tcp any eq tacacs any
deny tcp any any eq 22
deny tcp any eq 22 any
deny tcp any any eq telnet
deny tcp any eq telnet any
deny ospf any any
deny tcp any any eq bgp
deny tcp any eq bgp any
deny udp any any eq ntp
deny udp any any eq domain
deny udp any any eq snmp
deny udp any any eq syslog
deny udp any any eq 1645
deny udp any any eq 1646
deny udp any any eq 1812
deny udp any any eq 1813
deny tcp any eq 443 any
 deny tcp any any eq 443
deny udp any eq isakmp any eq isakmp
deny udp any any eq 848
deny ip 180.169.0.0 0.0.255.255 any
deny ip any 180.169.0.0 0.0.255.255
deny ip any 192.168.224.0 0.0.31.255
deny ip 192.168.224.0 0.0.31.255 any
deny ip any 10.160.0.0 0.0.255.255
deny ip 10.160.0.0 0.0.255.255 any
deny ip any 10.161.0.0 0.0.255.255
deny ip 10.161.0.0 0.0.255.255 any
deny ip any 10.162.0.0 0.0.255.255
deny ip 10.162.0.0 0.0.255.255 any
deny ip any 10.164.0.0 0.0.255.255
deny ip 10.164.0.0 0.0.255.255 any
deny ip 172.19.11.0 0.0.0.255 any
deny ip any 172.19.11.0 0.0.0.255
!
!
ip prefix-list SUMARY seq 1 permit 172.21.50.42/32
ip prefix-list SUMARY seq 2 permit 172.19.11.119/32
ip prefix-list SUMARY seq 3 permit 180.168.97.128/27
ip prefix-list SUMARY seq 4 permit 180.169.230.192/26
ip radius source-interface Loopback400
logging source-interface Loopback400
logging 180.168.68.47
access-list 20 permit 172.28.1.115
access-list 20 permit 172.28.1.109
access-list 69 remark Config_via_tftp - SNMP
access-list 69 permit 180.168.68.47
access-list 69 permit 180.168.68.226
access-list 69 permit 180.168.68.227
access-list 69 remark Config_via_tftp - SNMP
access-list 69 permit 180.168.68.228
access-list 90 permit any
access-list 118 remark Trafico interesante en ISDN-Analogo
access-list 118 deny ospf any any
access-list 118 permit ip any any
access-list 150 permit ip any host 180.168.68.130
access-list 150 permit ip any host 180.168.67.38
access-list 151 permit ip any host 180.176.0.1
access-list 151 permit ip any host 180.168.84.165
access-list 151 permit ip any host 180.168.176.1
access-list 151 permit ip any host 180.168.68.201
access-list 151 permit ip any host 180.168.68.138
access-list 151 permit ip any host 180.168.76.118
dialer-list 1 protocol ip list 118
snmp-server community ROT3l3f0n1c4 RO 69
snmp-server community RWT3l3f0n1c4 RW 69
snmp-server community TDCOL-EDC view v1default RO
snmp-server community TDCOLRO RO 10
snmp-server community TDCOLRW RW 10
snmp-server community G35ti0nbsItlRo RO SNMPCW
snmp-server community G35ti0nbsItlRw RW SNMPCW
snmp-server community totem_ro RO 20
snmp-server location TDCOL
snmp-server contact CNC-TDCOL
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps vrrp
snmp-server enable traps ds1
snmp-server enable traps tty
snmp-server enable traps eigrp
snmp-server enable traps xgcp
snmp-server enable traps envmon
snmp-server enable traps flash insertion
snmp-server enable traps flash removal
snmp-server enable traps icsudsu
snmp-server enable traps isdn call-information
snmp-server enable traps isdn layer2
snmp-server enable traps isdn chan-not-avail
snmp-server enable traps isdn ietf
snmp-server enable traps ds0-busyout
snmp-server enable traps ds1-loopback
snmp-server enable traps ethernet cfm cc mep-up mep-down cross-connect loop conf
ig
snmp-server enable traps ethernet cfm crosscheck mep-missing mep-unknown service
-up
snmp-server enable traps disassociate
snmp-server enable traps deauthenticate
snmp-server enable traps authenticate-fail
snmp-server enable traps dot11-qos
snmp-server enable traps switch-over
snmp-server enable traps rogue-ap
snmp-server enable traps wlan-wep
snmp-server enable traps atm subif
snmp-server enable traps bgp
snmp-server enable traps bstun
snmp-server enable traps bulkstat collection transfer
snmp-server enable traps memory bufferpeak
snmp-server enable traps cnpd
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps dial
snmp-server enable traps dlsw
snmp-server enable traps dsp card-status
snmp-server enable traps dsp oper-state
snmp-server enable traps entity
snmp-server enable traps fru-ctrl
snmp-server enable traps resource-policy
snmp-server enable traps frame-relay multilink bundle-mismatch
snmp-server enable traps frame-relay
snmp-server enable traps frame-relay subif
snmp-server enable traps hsrp
snmp-server enable traps ipmobile
snmp-server enable traps ipmulticast
snmp-server enable traps mpls ldp
snmp-server enable traps mpls traffic-eng
snmp-server enable traps msdp
snmp-server enable traps mvpn
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps ospf retransmit
snmp-server enable traps ospf lsa
snmp-server enable traps ospf cisco-specific state-change nssa-trans-change
snmp-server enable traps ospf cisco-specific state-change shamlink interface-old
snmp-server enable traps ospf cisco-specific state-change shamlink neighbor
snmp-server enable traps ospf cisco-specific errors
snmp-server enable traps ospf cisco-specific retransmit
snmp-server enable traps ospf cisco-specific lsa
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-messa
ge
snmp-server enable traps pppoe
snmp-server enable traps cpu threshold
snmp-server enable traps rsvp
snmp-server enable traps ipsla
snmp-server enable traps stun
snmp-server enable traps syslog
snmp-server enable traps l2tun session
snmp-server enable traps l2tun pseudowire status
snmp-server enable traps vtp
snmp-server enable traps pw vc
snmp-server enable traps event-manager
snmp-server enable traps director server-up server-down
snmp-server enable traps firewall serverstatus
snmp-server enable traps rf
snmp-server enable traps isakmp policy add
snmp-server enable traps isakmp policy delete
snmp-server enable traps isakmp tunnel start
snmp-server enable traps isakmp tunnel stop
snmp-server enable traps ipsec cryptomap add
snmp-server enable traps ipsec cryptomap delete
snmp-server enable traps ipsec cryptomap attach
snmp-server enable traps ipsec cryptomap detach
snmp-server enable traps ipsec tunnel start
snmp-server enable traps ipsec tunnel stop
snmp-server enable traps ipsec too-many-sas
snmp-server enable traps ccme
snmp-server enable traps srst
snmp-server enable traps mpls vpn
snmp-server enable traps voice
snmp-server enable traps dnis
snmp-server host 180.168.58.141 G35ti0nbsItlRo
!
!
!
!
route-map REDES_OUT_PPAL permit 0
description REDES_ENSENADAS
match ip address prefix-list SUMARY
!
route-map REDES_OUT_BCK permit 0
description REDES_ENSENADAS
match ip address prefix-list SUMARY
set as-path prepend 64520 64520 64520
!
route-map METRICA permit 10
match ip address 90
set as-path prepend 64520 64520 64520
!
route-map REDES permit 0
description REDES_ENSENADAS_CONECTADAS
match interface Loopback400 Loopback500
!
!
!
tftp-server nvram:startup-config 69
tftp-server flash:c2801-adventerprisek9-mz.124-22.T.bin
tacacs-server host 180.168.69.11
tacacs-server key multitek2009
radius-server host 180.168.68.210 auth-port 1645 acct-port 1646
radius-server retransmit 2
radius-server key 7 040A5C545675594F1A1D0A1E1A595F507F7274383631
!
control-plane
!
!
!
voice-port 0/0/0
trunk-group bancosantander
supervisory disconnect dualtone mid-call
cptone CO
timeouts call-disconnect 3
timeouts wait-release 3
timing hookflash-out 500
connection plar 60400
description Directo 2576282 Ext 70405 Fax
!
voice-port 0/0/1
trunk-group bancosantander
supervisory disconnect dualtone mid-call
cptone CO
timeouts call-disconnect 3
timeouts wait-release 3
timing hookflash-out 500
connection plar 60400
description Directo 2914541 Ext 60400 Auto Attendant
!
voice-port 0/0/2
trunk-group bancosantander
supervisory disconnect dualtone mid-call
cptone CO
timeouts call-disconnect 3
timeouts wait-release 3
timing hookflash-out 500
connection plar 60400
description Directo 2180546 Ext 60400 Auto Attendant
!
voice-port 0/0/3
trunk-group bancosantander
supervisory disconnect dualtone mid-call
cptone CO
timeouts call-disconnect 3
timeouts wait-release 3
timing hookflash-out 500
connection plar 60400
description Directo 6914543 Ext 60400 Auto Attendant Ppal
!
voice-port 0/1/0
trunk-group bancosantander
supervisory disconnect dualtone mid-call
cptone CO
timeouts call-disconnect 3
timeouts wait-release 3
timing hookflash-out 500
connection plar 60400
description Directo 2180263 Ext 60400 Auto Attendant
!
voice-port 0/1/1
trunk-group bancosantander
supervisory disconnect dualtone mid-call
 cptone CO
timeouts call-disconnect 3
timeouts wait-release 3
timing hookflash-out 500
connection plar 60400
!
voice-port 0/1/2
trunk-group bancosantander
supervisory disconnect dualtone mid-call
cptone CO
timeouts call-disconnect 3
timeouts wait-release 3
timing hookflash-out 500
connection plar 60400
!
voice-port 0/1/3
trunk-group bancosantander
supervisory disconnect dualtone mid-call
cptone CO
timeouts call-disconnect 3
timeouts wait-release 3
timing hookflash-out 500
connection plar 60400
!
ccm-manager fallback-mgcp
ccm-manager redundant-host 180.168.58.136 180.168.58.198
ccm-manager mgcp
ccm-manager music-on-hold
!
mgcp
mgcp call-agent 180.168.58.135 service-type mgcp version 0.1
mgcp dtmf-relay voip codec all mode out-of-band
mgcp rtp unreachable timeout 1000 action notify
mgcp modem passthrough voip mode nse
mgcp ip qos dscp default signaling
mgcp package-capability rtp-package
mgcp package-capability sst-package
mgcp package-capability pre-package
no mgcp package-capability res-package
no mgcp package-capability fxr-package
no mgcp timer receive-rtcp
mgcp sdp simple
mgcp rtp payload-type g726r16 static
mgcp bind control source-interface FastEthernet0/0.199
mgcp bind media source-interface FastEthernet0/0.199
!
mgcp profile default
!
sccp local FastEthernet0/0.199
sccp ccm 180.168.58.136 identifier 3 priority 2 version 5.0.1
sccp ccm 180.168.58.134 identifier 4 priority 4 version 5.0.1
sccp ccm 180.168.58.135 identifier 1 priority 1 version 5.0.1
sccp
!
sccp ccm group 1
description TRANSCODING y CONFERENCE
bind interface FastEthernet0/0.199
associate ccm 1 priority 1
associate ccm 3 priority 3
associate ccm 4 priority 4
 associate profile 2 register CFB_040
associate profile 1 register TC_040
!
dspfarm profile 1 transcode
description transcode_profile1
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
codec g729br8
codec g729r8
maximum sessions 3
associate application SCCP
!
dspfarm profile 2 conference
description conference profile 2
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
codec g729r8
codec g729br8
maximum sessions 1
associate application SCCP
!
!
dial-peer voice 1 pots
service mgcpapp
port 0/0/0
!
dial-peer voice 2 pots
service mgcpapp
port 0/0/1
!
dial-peer voice 3 pots
service mgcpapp
port 0/0/2
!
dial-peer voice 4 pots
service mgcpapp
port 0/0/3
!
dial-peer voice 5 pots
service mgcpapp
port 0/1/0
!
dial-peer voice 6 pots
service mgcpapp
port 0/1/1
!
dial-peer voice 7 pots
service mgcpapp
port 0/1/2
!
dial-peer voice 8 pots
service mgcpapp
port 0/1/3
!
dial-peer voice 9 pots
service mgcpapp
!
dial-peer voice 10 pots
service mgcpapp
!
dial-peer voice 11 pots
service mgcpapp
!
dial-peer voice 12 pots
service mgcpapp
!
dial-peer voice 13 pots
service mgcpapp
!
dial-peer voice 14 pots
service mgcpapp
!
dial-peer voice 15 pots
service mgcpapp
!
dial-peer voice 16 pots
service mgcpapp
!
dial-peer voice 17 pots
service mgcpapp
!
dial-peer voice 18 pots
service mgcpapp
!
dial-peer voice 19 pots
service mgcpapp
!
dial-peer voice 20 pots
service mgcpapp
!
dial-peer voice 100 pots
trunkgroup bancosantander
description SRST Llamada local
destination-pattern 0[2-8]......
forward-digits 7
!
dial-peer voice 102 pots
trunkgroup bancosantander
description LDN
destination-pattern 00.........
forward-digits 10
!
dial-peer voice 123 pots
trunkgroup bancosantander
description Emergencias Bogota 123
destination-pattern 0123
forward-digits 3
!
dial-peer voice 112 pots
trunkgroup bancosantander
description Policia 112
destination-pattern 0112
forward-digits 3
!
dial-peer voice 122 pots
trunkgroup bancosantander
 description Fiscalia 122
destination-pattern 0122
forward-digits 3
!
dial-peer voice 153 pots
trunkgroup bancosantander
description DAS 153
destination-pattern 0153
forward-digits 3
!
dial-peer voice 156 pots
trunkgroup bancosantander
description CAI 156
destination-pattern 0156
forward-digits 3
!
dial-peer voice 157 pots
trunkgroup bancosantander
description Dijin 157
destination-pattern 0157
forward-digits 3
!
dial-peer voice 165 pots
trunkgroup bancosantander
description Gaula 165
destination-pattern 0165
forward-digits 3
!
dial-peer voice 34000 voip
destination-pattern 31....
session protocol sipv2
session target ipv4:180.169.230.195
dtmf-relay sip-notify
codec g711ulaw
no vad
!
dial-peer voice 34001 voip
destination-pattern 60400
session protocol sipv2
session target ipv4:180.169.230.195
dtmf-relay sip-notify
codec g711ulaw
no vad
!
!
gateway
timer receive-rtp 600
!
!
!
call-manager-fallback
secondary-dialtone 0
max-conferences 4 gain -6
transfer-system full-consult
ip source-address 180.169.230.193 port 2000
max-ephones 24
max-dn 48 dual-line
transfer-pattern .....
alias 1 390401 to 70401 preference 1 cfw 390402 timeout 10
alias 2 390402 to 70402 preference 1 cfw 390403 timeout 10
 alias 3 390403 to 60405 preference 1 cfw 390404 timeout 10
alias 4 390404 to 60406 preference 1 cfw 390405 timeout 10
alias 5 390405 to 60402 preference 1 cfw 390401 timeout 10
moh MoH.wav
!
banner login 

----------------------------------------------------------------------
!!! ADVERTENCIA !!!
Usted se ha conectado a un sistema privado de comunicaciones,cualquier
acceso al mismo debe ser autorizado por el Area de Telecomunicaciones
o en su defecto por el Oficial de Seguridad.
SI NO ES UN USUARIO AUTORIZADO POR FAVOR ABSTENGASE DE INGRESAR,
SUS OPERACIONES ESTAN SIENDO MONITOREADAS!!
Para mayor informacion contactese con:
Grupo GESTION DE TELECOMUNICACIONES
Extensiones (571) 6448000 18035-19029
Grupo Seguridad Informatica
Extensiones (571) 6448000 19132-19689

BANCO SANTANDER COLOMBIA

TELEFONICA DATA COLOMBIA

----------------------------------------------------------------------


banner motd 
[[[[[[[[[[[ [[[[[[[[[ [[[[[[[[[ [[[[[ [[[[[
[[[ [[[ [[[ [[[ [[[ [[[ [[[ [[[
[[[ [[[ [[[ [[[ [[[ [[[
[[[[[[[[[[ [[[[[[[[[ [[[ [[[[[[[[[[[
[[[ [[[ [[[ [[[ [[[ [[[
[[[ [[[ [[[ [[[ [[[ [[[ [[[ [[[
[[[[[[[[[[[ [[[[[[[[[ [[[[[[[[[ [[[[[ [[[[[

'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
___ _
| _ | _ _|_ _ ._ o _ _.
| (/_ | (/_ | (_) | | | (_ (_|
+-+ +-+ +-+ +-+ +-+ +-+ +-+ +-+ +-+ +-+ +-+
|A| |D| |V| |E| |R| |T| |E| |N| |C| |I| |A|
+-+ +-+ +-+ +-+ +-+ +-+ +-+ +-+ +-+ +-+ +-+
Usted se ha conectado a un sistema privado de comunicaciones,cualquier
acceso al mismo debe ser autorizado por el Area de Telecomunicaciones
o en su defecto por el Oficial de Seguridad.
SI NO ES UN USUARIO AUTORIZADO POR FAVOR ABSTENGASE DE INGRESAR,
SUS OPERACIONES ESTAN SIENDO MONITOREADAS!!
Para mayor informacion contactese con:
Grupo GESTION DE TELECOMUNICACIONES
Extensiones (571) 6448000 18035-19029
Grupo Seguridad Informatica
Extensiones (571) 6448000 19132-19689

!
line con 0
line aux 0
line 66
no activation-character
no exec
transport preferred none
transport input all
transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
line vty 0 4
session-timeout 10
privilege level 15
password 7 072C0E60032A3E2033313F2827
accounting exec rad-log
login authentication radius-login
transport input ssh
!
scheduler allocate 20000 1000
ntp server 180.168.67.44 source FastEthernet0/0.3
end