PIDSOB#

PIDSOB#sh run

Building configuration...

Current configuration : 5286 bytes

version 15.5

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname PIDSOB

boot-start-marker

boot-end-marker

logging buffered 51200 warnings

enable secret 5 $1$9F.D$cLxW2sXp5qcNZHDF7aTnk.

enable password BankTowers03

no aaa new-model

ethernet lmi ce
service-module wlan-ap 0 bootimage autonomous

crypto pki trustpoint TP-self-signed-3982563086

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-3982563086

revocation-check none

rsakeypair TP-self-signed-3982563086

crypto pki certificate chain TP-self-signed-3982563086

certificate self-signed 01

3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030

31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274

69666963 6174652D 33393832 35363330 3836301E 170D3136 30383132 31363339

32385A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649

4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 39383235

36333038 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281

8100D635 632E8FA9 BC4E2B07 AF8BD655 E70F8386 F150D258 E3699DD4 88EFDB50

952E8C38 9EB202CD 4FED3D14 CCBEA8AF 9200AF48 51567BD5 53725184 A0A23ADF

1F280CAD AA2B8B36 3681E86D 3C77A795 964B5EE2 CAB1BA6C 1E0F94B8 3CCBD34A

FC913500 E66380E3 BC744B4A D9685085 D68F0F78 6BE8D71D A2C475F9 883B7B6A

ABCF0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603

551D2304 18301680 1476C039 C524B9C7 25382EF4 6890BB7A 1F10A65B 03301D06

03551D0E 04160414 76C039C5 24B9C725 382EF468 90BB7A1F 10A65B03 300D0609

2A864886 F70D0101 05050003 81810092 971B7C80 A2C8D50A 571A33F4 F0B12781

 65687958 AD1192EA 0F1271F5 DF938113 7D701A76 FD1EEF33 0EF2C7CB 61E451C9

94B86630 0D8EF88F B645C8E6 AB6C02A8 300A3FB3 1137D66B BF235F3A 6D6EB3F2

16BEDAF8 75B562DC 55C1584F 145F5D1D 40760439 E7078859 3F766C58 80F40903

843CF4EA 48EB7E25 4321D01E E829A0

quit

ip dhcp excluded-address 10.10.10.1

!
ip dhcp pool ccp-pool

import all

network 10.10.10.0 255.255.255.128

default-router 10.10.10.1

dns-server 198.224.156.135

lease 0 2

no ip domain lookup

ip domain name yourdomain.com

ip cef

no ipv6 cef

flow record nbar-appmon

match ipv4 source address

match ipv4 destination address

match application name

collect interface output

collect counter bytes

collect counter packets

collect timestamp absolute first

collect timestamp absolute last

!
!

flow monitor application-mon

cache timeout active 60

record nbar-appmon

multilink bundle-name authenticated

chat-script lte "" "AT!CALL" TIMEOUT 20 "OK"

license udi pid C819GW-LTE-MNA-AK9 sn FJC2016L1UM

object-group network local_cws_net

object-group network local_lan_subnets

any
!

object-group network vpn_remote_subnets

any

username PIDSOB privilege 15 password 0 BankTowers3

controller Cellular 0

no cdp run

zone security LAN

zone security WAN

zone security VPN

zone security DMZ

!
!

interface Loopback1

ip address 1.2.3.9 255.255.255.255

interface Cellular0

ip address negotiated

no ip unreachables

ip nat outside

ip virtual-reassembly in

encapsulation slip

load-interval 30

dialer in-band

dialer idle-timeout 0

dialer enable-timeout 6

dialer string lte

dialer string ltescript

dialer watch-group 1

async mode interactive

interface FastEthernet0

no ip address

interface FastEthernet1
no ip address

interface FastEthernet2

no ip address

interface FastEthernet3

no ip address

interface GigabitEthernet0

no ip address

shutdown

duplex auto

speed auto

interface Serial0

no ip address

shutdown

clock rate 2000000

interface Wlan-GigabitEthernet0

no ip address

interface wlan-ap0

ip unnumbered Vlan1

!
interface Vlan1

description $ETH_LAN$

ip address 10.10.10.1 255.255.255.128

ip nat inside

ip virtual-reassembly in

ip tcp adjust-mss 1452

ip forward-protocol nd

ip http server

ip http access-class 23

ip http authentication local

ip http secure-server

ip http timeout-policy idle 60 life 86400 requests 10000

ip nat inside source list 100 interface Cellular0 overload

ip route 0.0.0.0 0.0.0.0 Cellular0

ip access-list extended nat-list

permit ip object-group local_lan_subnets any

dialer watch-list 1 ip 5.6.7.8 0.0.0.0

dialer watch-list 1 delay route-check initial 60

dialer watch-list 1 delay connect 1

!
route-map clear-df permit 10

set ip df 0

access-list 23 permit 10.10.10.0 0.0.0.127

access-list 100 permit ip any any

control-plane

mgcp behavior rsip-range tgcp-only

mgcp behavior comedia-role none

mgcp behavior comedia-check-media-src disable

mgcp behavior comedia-sdp-force disable

mgcp profile default

line con 0

script dialer ltescript

login local

no modem enable

no exec

transport preferred ssh

line aux 0

line 2

no activation-character

no exec

transport preferred none

transport input all

stopbits 1

line 3

script dialer lte

no exec

rxspeed 100000000

txspeed 50000000

line vty 0 4

access-class 23 in

privilege level 15

login local

transport input telnet ssh

line vty 5 15

access-class 23 in

privilege level 15

login local
transport input telnet ssh

scheduler allocate 20000 1000

end

PIDSOB#

PIDSOB#

PIDSOB#

PIDSOB#

PIDSOB#

PIDSOB#sh ip int brie

Interface IP-Address OK? Method Status Protocol

Cellular0 100.109.121.33 YES IPCP up up

FastEthernet0 unassigned YES unset down down

FastEthernet1 unassigned YES unset down down

FastEthernet2 unassigned YES unset up up

FastEthernet3 unassigned YES unset down down

GigabitEthernet0 unassigned YES NVRAM administratively down down

Loopback1 1.2.3.9 YES NVRAM up up

NVI0 1.2.3.9 YES unset up up

Serial0 unassigned YES NVRAM administratively down down

Vlan1 10.10.10.1 YES NVRAM up up

Wlan-GigabitEthernet0 unassigned YES unset up up

wlan-ap0 10.10.10.1 YES TFTP up up

PIDSOB#