version 17.13
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
platform sslvpn use-pd
platform console serial
!
hostname OnPrem_R1
!
boot-start-marker
boot-end-marker
!
!
vrf definition 65528
 description SIG VRF
 !
 address-family ipv4
 exit-address-family
!
vrf definition 65529
 description Speedtest VRF
 !
 address-family ipv4
 exit-address-family
!
no logging console
aaa new-model
!
!
aaa authentication login default local
aaa authentication enable default enable
aaa authorization console
aaa authorization exec default local 
!
!
aaa session-id common
!
!
!
!
!
!
!
!
!
!
!
!
no ip dhcp use class
!
!
!
login on-success log
!
!
subscriber templating
ipv6 unicast-routing
ipv6 rip vrf-mode enable
fhrp version vrrp v3
!
! 
! 
! 
! 
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-3338550478
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-3338550478
 revocation-check none
 rsakeypair TP-self-signed-3338550478
 hash sha256
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
 hash sha256
!
!
crypto pki certificate chain TP-self-signed-3338550478
crypto pki certificate chain SLA-TrustPoint
!
!
!
!
!
!
!
!
!
license udi pid C8000V sn C8K
memory free low-watermark processor 225161
diagnostic bootup level minimal
!
!
spanning-tree extend system-id
!
!
!
username cisco privilege 15 secret 9 $9$FgRKVYgkECSOUk$aWvKA9pcWpQF7ihMYZI0WoaEgsFrUPHIYao9B1czkgU
!
redundancy
!
!
!
!
no crypto ikev2 diagnose error
!
!
!
! 
!
!
!
!
!
!
!
!
!
!
!
!
!
! 
! 
!
!
interface Loopback65528
 vrf forwarding 65528
 ip address 192.168.1.1 255.255.255.255
!
interface Loopback65529
 vrf forwarding 65529
 ip address 11.1.255.1 255.255.255.255
!
interface Tunnel2
 ip unnumbered GigabitEthernet2.100
 tunnel source GigabitEthernet2.100
 tunnel mode sdwan
!
interface GigabitEthernet1
 ip address 204.186.19.10 255.255.255.0
 negotiation auto
 no mop enabled
 no mop sysid
!
interface GigabitEthernet2
 no ip address
 negotiation auto
 no mop enabled
 no mop sysid
!
interface GigabitEthernet2.100
 encapsulation dot1Q 100
 ip address 10.100.10.1 255.255.255.0
!
interface GigabitEthernet3
 no ip address
 negotiation auto
 no mop enabled
 no mop sysid
!
interface GigabitEthernet4
 no ip address
 negotiation auto
 no mop enabled
 no mop sysid
!
interface GigabitEthernet5
 no ip address
 negotiation auto
 no mop enabled
 no mop sysid
!
router omp
!
ip forward-protocol nd
!
ip http server
ip http secure-server
ip route 0.0.0.0 0.0.0.0 204.186.19.1
ip nat settings central-policy
ip nat settings gatekeeper-size 1024
ip nat route vrf 65528 0.0.0.0 0.0.0.0 global
no ip nat service all-algs
no ip ssh bulk-mode
ip scp server enable
!
!
!
!
!
!
!
!
control-plane
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
!
line con 0
 stopbits 1
line aux 0
line vty 0 4
 transport input none
line vty 5 80
 transport input none
!
!
!
!
!
!
!
!
telemetry receiver protocol confd-rfc5277
 host ip-address 0.0.0.0 0
 protocol rfc5277
netconf-yang
netconf-yang feature candidate-datastore
end