下面是以前我在一家isp工作时维护的一个客户路由器上的配置，这个客户租了我们12条IP- VPN线路，是个大客户。对于IP-VPN内部专线，这个客户主要用于访问远程ERP系统和VOIP语音电话。下面是完整的配置，除了名称用xxx代替外，其它都保留不变。对于爱好网络技术的朋友是一个学习cisco技术的难得的参考。有爱好的朋友可以分析一下，注：一般IP-VPN专线其实就是DDN加IPVPN技术，一般采用EIGRP协议的。User Access VerificationUsername: xxxx01xPassword:xxxx01-BJ-4>enPassword:xxxx01-BJ-4#sh runBuilding configuration...Current configuration : 5624 bytes!! Last configuration change at 12:05:04 SHT Thu Feb 2 2006 by xxxx01user! NVRAM config last updated at 12:05:05 SHT Thu Feb 2 2006 by xxxx01user!version 12.1service timestamps debug datetime localtimeservice timestamps log datetime localtimeservice password-encryption!hostname xxxx01-BJ-4!logging buffered 4096 debuggingenable secret 5 $1$Tmai$BXXdfdfdfdfdf&%$$#Y4xm2uMbBBW/enable password 7 01100B081E1D090631!username netuser password 7 121A0A041F041Fusername netuser autocommand menu netuserusername xxxx01user password 7 070C2C400B1F1dfdfd60C07username ispuser privilege 15 password 7 13061A1E0Adfdfd08092325!!!!clock timezone SHT 8ip subnet-zerono ip fingerno ip domain-lookup!!!!interface Loopback0description "Loopback for Voice"ip address 10.136.71.254 255.255.255.255!interface Tunnel40101description "BJ-xxxx01 - SH-xxxx02"ip address 172.16.255.14 255.255.255.252tunnel source 10.136.252.50tunnel destination 10.23.252.70!interface Tunnel40102description "BJ-xxxx01 - SH-xxxx02 (Voice)"ip address 172.16.254.14 255.255.255.252tunnel source 10.136.71.254tunnel destination 10.16.67.254!interface Tunnel40201description "BJ-xxxx01 - SZ-xxxx02"ip address 172.16.255.22 255.255.255.252tunnel source 10.136.252.50tunnel destination 10.144.253.58!interface Tunnel40202description "BJ-xxxx01 - SZ-xxxx02 (Voice)"ip address 172.16.254.22 255.255.255.252tunnel source 10.136.71.254tunnel destination 10.144.80.254!interface Tunnel40301description "BJ-xxxx01 - SH-xxxx01"ip address 172.16.255.6 255.255.255.252ip mtu 1600tunnel source 10.136.252.50tunnel destination 10.23.252.82!interface Tunnel40302description "BJ-xxxx01 - SH-xxxx01 (Voice)"ip address 172.16.254.6 255.255.255.252tunnel source 10.136.71.254tunnel destination 10.16.70.254!interface Tunnel40501description "To xxxx01-GZ"ip address 172.16.255.29 255.255.255.252ip mtu 1600tunnel source 10.136.252.50tunnel destination 10.144.253.78!interface Tunnel40502description "To xxxx01-GZ (Voice)"ip address 172.16.254.29 255.255.255.252tunnel source 10.136.71.254tunnel destination 10.144.85.254!interface Ethernet0ip address 192.168.2.253 255.255.255.0!interface Serial0bandwidth 256ip address 10.136.252.50 255.255.255.252encapsulation ppppriority-group 1!router eigrp 1redistribute static metric 100 100 255 1 1500 route-map rm_static2eigrpnetwork 172.16.254.0 0.0.0.255network 172.16.255.0 0.0.0.255network 192.168.2.0distribute-list prefix 111 out Tunnel40101distribute-list prefix 112 out Tunnel40102distribute-list prefix 111 out Tunnel40201distribute-list prefix 112 out Tunnel40202distribute-list prefix 111 out Tunnel40301distribute-list prefix 112 out Tunnel40302distribute-list prefix 111 out Tunnel40501distribute-list prefix 112 out Tunnel40502no auto-summaryno eigrp log-neighbor-changes!ip classlessip route 0.0.0.0 0.0.0.0 Serial0ip route 10.0.0.0 255.0.0.0 Serial0ip route 10.16.67.254 255.255.255.255 Serial0ip route 10.16.70.254 255.255.255.255 Serial0ip route 10.23.252.70 255.255.255.255 Serial0ip route 10.23.252.82 255.255.255.255 Serial0ip route 10.23.253.0 255.255.255.0 Serial0ip route 10.144.80.254 255.255.255.255 Serial0ip route 10.144.85.254 255.255.255.255 Serial0ip route 10.144.253.58 255.255.255.255 Serial0ip route 10.144.253.78 255.255.255.255 Serial0ip route 192.168.2.252 255.255.255.255 Ethernet0ip route 192.168.4.0 255.255.255.0 192.168.2.254ip route 192.168.5.0 255.255.255.0 192.168.2.254ip route 192.168.30.0 255.255.255.0 192.168.2.254ip route 192.168.31.0 255.255.255.0 192.168.2.254no ip http server!!ip prefix-list 111 description "Deny Voice"ip prefix-list 111 seq 5 permit 0.0.0.0/0 le 31!ip prefix-list 112 description "
ermit Voice"ip prefix-list 112 seq 5 permit 0.0.0.0/0 ge 32access-list 1 permit 192.168.2.252access-list 1 permit 192.168.4.0 0.0.0.255access-list 1 permit 192.168.5.0 0.0.0.255access-list 1 permit 192.168.30.0 0.0.0.255access-list 1 permit 192.168.31.0 0.0.0.255access-list 10 permit 10.23.253.0 0.0.0.255access-list 101 permit ip host 10.136.71.254 anypriority-list 1 protocol ip high list 101priority-list 1 queue-limit 100 100 100 100!menu netuser title ^C Testing Menu^Cmenu netuser prompt ^CPlease enter your selection : ^Cmenu netuser text 1 show interface s0menu netuser command 1 show interface s0menu netuser options 1 pausemenu netuser text 2 show interface e0menu netuser command 2 show interface e0menu netuser options 2 pausemenu netuser text e exitmenu netuser command e logoutmenu netuser clear-screenmenu netuser default emenu netuser line-moderoute-map rm_static2eigrp permit 10match ip address 1!snmp-server community xxxx RO 10alias exec sion sh ip ospf neialias exec sbro sh run | be router ospfalias exec sbrb sh run | be router bgpalias exec sibs sh ip bgp sualias exec sib sh ip bgpalias exec sipr sh ip pim rpalias exec siprm sh ip pim rp mapalias exec sbrr sh run | be router ripalias exec sri sh run intalias exec si sh run | inalias exec sb sh run | bealias exec siib sh ip int briefalias exec i sh ip routealias exec sal sh ip access-lalias exec ct conf talias exec sip sh ip proalias exec sbre sh run | be router eigrpalias exec sien sh ip eigrp nei!line con 0exec-timeout 360 0logging synchronouslogin localtransport input noneline vty 0 4exec-timeout 360 0logging synchronouslogin local!sntp server 10.23.253.254endxxxx01-BJ-4#
