!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Seattle-WAN/CME
!
!
!
enable secret 5 $1$mERr$hx5rVt7rPNoS4wqbXKX7m0
!
!
ip dhcp excluded-address 192.168.10.1 192.168.10.9
ip dhcp excluded-address 192.168.20.1 192.168.20.9
ip dhcp excluded-address 192.168.50.1 192.168.50.9
ip dhcp excluded-address 192.168.60.1 192.168.60.9
!
ip dhcp pool admin
 network 192.168.8.0 255.255.252.0
 default-router 192.168.10.0
 dns-server 10.10.10.254
ip dhcp pool accounting
 network 192.168.16.0 255.255.248.0
 default-router 192.168.20.0
 dns-server 10.10.10.254
ip dhcp pool wireless
 network 192.168.50.0 255.255.255.0
 default-router 192.168.50.1
 dns-server 10.10.10.254
ip dhcp pool voice
 network 192.168.60.0 255.255.255.0
 default-router 192.168.60.1
 option 150 ip 192.168.60.1
 dns-server 10.10.10.254
!
!
aaa new-model
!
aaa authentication login console group tacacs+ 
aaa authentication login default group tacacs+ none 
aaa authentication login telnet_lines group tacacs+ 
!
!
!
!
clock timezone ca -8
!
!
!
!
!
!
!
!
ip ssh version 1
no ip domain-lookup
!
!
spanning-tree mode pvst
!
!
!
!
interface Loopback0
 ip address 192.168.254.254 255.255.255.255
!
interface FastEthernet0/0
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface FastEthernet0/1
 no ip address
 duplex auto
 speed auto
!
interface FastEthernet0/1.10
 encapsulation dot1Q 10
 ip address 192.168.10.0 255.255.252.0
 ip access-group BLK-DMZ in
!
interface FastEthernet0/1.20
 encapsulation dot1Q 20
 ip address 192.168.20.0 255.255.248.0
 ip access-group BLK-DMZ in
!
interface FastEthernet0/1.30
 encapsulation dot1Q 30
 ip address 192.168.30.30 255.255.255.224
 ip access-group BLK-DMZ in
!
interface FastEthernet0/1.40
 encapsulation dot1Q 40
 ip address 192.168.40.1 255.255.255.0
 ip access-group BLK-DMZ in
!
interface FastEthernet0/1.50
 encapsulation dot1Q 50
 ip address 192.168.50.1 255.255.255.0
 ip access-group BLK-DMZ in
!
interface FastEthernet0/1.60
 encapsulation dot1Q 60
 ip address 192.168.60.1 255.255.255.0
 ip access-group BLK-DMZ in
!
interface Serial0/0/0
 no ip address
 encapsulation frame-relay
 ipv6 ospf cost 781
!
interface Serial0/0/0.3 point-to-point
 ip address 192.168.1.1 255.255.255.0
 frame-relay interface-dlci 201
 clock rate 2000000
!
interface Vlan1
 no ip address
 shutdown
!
router eigrp 15
 network 192.168.0.0 0.0.255.255
 no auto-summary
!
ip classless
!
!
ip access-list extended BLK-DMZ
 deny ip 192.168.10.0 0.0.0.255 10.1.1.0 0.0.0.255
 deny ip 192.168.20.0 0.0.0.255 10.1.1.0 0.0.0.255
 deny ip 192.168.30.0 0.0.0.255 10.1.1.0 0.0.0.255
 deny ip 192.168.40.0 0.0.0.255 10.1.1.0 0.0.0.255
 deny ip 192.168.50.0 0.0.0.255 10.1.1.0 0.0.0.255
 deny ip 192.168.60.0 0.0.0.255 10.1.1.0 0.0.0.255
 permit ip any any
!
!
tacacs-server host 192.168.40.200 key ciscosecret
!
!
!
telephony-service
 max-ephones 5
 max-dn 5
 ip source-address 192.168.254.254 port 2000
 auto assign 1 to 5
 auto assign 4 to 6
!
ephone-dn 1
 number 1101
!
ephone-dn 2
 number 1102
!
ephone-dn 3
 number 1103
!
ephone-dn 4
 number 1104
!
ephone-dn 5
 number 1105
!
ephone 1
 device-security-mode none
 mac-address 0090.216B.EDA1
 type 7960
 button 1:1
!
ephone 2
 device-security-mode none
 mac-address 0002.1635.91D1
 type 7960
 button 1:2
!
ephone 3
 device-security-mode none
 mac-address 0001.6324.DBBE
 type 7960
 button 1:3
!
ephone 4
 device-security-mode none
 mac-address 000C.CF44.4419
 type 7960
 button 1:4
!
ephone 5
 device-security-mode none
!
line con 0
 exec-timeout 0 0
 login authentication console
line vty 0 4
 exec-timeout 0 0
 login authentication telnet_lines
!
!
ntp server 10.10.10.254 key 0
!
end