version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service sequence-numbers
!
hostname Router-3845
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length 6
no logging buffered
logging console critical
!
aaa new-model
aaa session-mib disconnect
!
!
aaa authentication login default local group radius
aaa authentication ppp default local group radius
aaa authorization exec default local group radius
aaa authorization network default local group radius if-authenticated
aaa accounting delay-start
aaa accounting suppress null-username
aaa accounting update periodic 5
aaa accounting network default start-stop group radius
!
!
aaa session-id unique
clock timezone ZP6 6
no ip source-route
!
!
ip cef
!
multilink bundle-name authenticated
vpdn enable
vpdn aaa attribute nas-ip-address vpdn-nas
vpdn aaa attribute nas-port vpdn-nas
!
vpdn-group shk
! Default PPTP VPDN group
 accept-dialin
  protocol pptp
  virtual-template 1
 l2tp tunnel password 7
 l2tp tunnel receive-window 1024
 ip pmtu
 ip mtu adjust
!
voice-card 0
 no dspfarm
no ip ftp passive
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh rsa keypair-name bgbilling
ip ssh version 1
!
!
!
!
interface Loopback0
 ip address **** ****
!
interface GigabitEthernet0/0
 description SHK-INTERNET
 ip address **** ****
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip virtual-reassembly
 duplex auto
 speed auto
 media-type sfp
 no keepalive
 no mop enabled
!
interface GigabitEthernet0/1
 description DEFAULT INTERFECES GE1$ETH-LAN$
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip virtual-reassembly
 ip route-cache flow
 duplex auto
 speed auto
 media-type rj45
 no keepalive
 no mop enabled
!
interface GigabitEthernet0/1.1
 description TRANSTELEKOM
 encapsulation dot1Q 1 native
 ip address **** ****
 ip virtual-reassembly
 no cdp enable
!
interface GigabitEthernet0/1.2
 encapsulation dot1Q 8
 ip address **** ****
 no cdp enable
!
interface Virtual-Template1
 ip unnumbered GigabitEthernet0/0
 ip mtu 1492
 ip flow ingress
 ip flow egress
 ip virtual-reassembly
 autodetect encapsulation ppp
 no peer default ip address
 ppp max-bad-auth 3
 ppp encrypt mppe auto
 ppp authentication chap ms-chap callin callout
 ppp ipcp dns **** ****
 ppp timeout retry 3
 ppp timeout authentication 45
 ppp timeout idle 3600
!
router ospf 1
 log-adjacency-changes
 redistribute static
 network **** **** area 0
 network **** **** area 0
 distance 10
!
!
ip flow-cache timeout inactive 10
ip flow-cache timeout active 1
ip flow-export version 5
ip flow-export destination **** 9996
ip flow-export destination **** 9996
!
ip http server
ip http authentication aaa login-authentication default
ip http authentication aaa exec-authorization default
ip http secure-server
!
ip radius source-interface GigabitEthernet0/0
no logging trap
!
radius-server attribute 44 include-in-access-req
radius-server attribute 8 include-in-access-req
radius-server attribute 32 include-in-access-req format %h
radius-server attribute 32 include-in-accounting-req format %h
radius-server attribute nas-port format e UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU
radius-server attribute 31 mac format unformatted
radius-server host **** auth-port 1812 acct-port 1813 non-standard
radius-server retransmit 5
radius-server timeout 30
radius-server deadtime 1
radius-server key ****
radius-server vsa send accounting
radius-server vsa send authentication
!
control-plane
!
!
webvpn cef
!