ReGen Configs/AU/Country-Core/AU_CORE-COUNTRY-CORE-STACK.cfg run-1785581195268-0vk3p3pn3 · Alive
! Country core stack for Australia at Canberra ! ====================================================================== ! INTERNET ISR1111 ! ====================================================================== hostname AU_CORE-EDGE interface GigabitEthernet0/0/0 description Australia Country Core WAN interface ip address 192.0.2.34 255.255.255.252 no shutdown
interface GigabitEthernet0/1/0
description Australia Country Core DIRTY_TRANSIT interface
ip address 172.20.0.33 255.255.255.252
no shutdown
crypto ikev2 proposal COUNTRY-IKEV2
encryption aes-gcm-256
prf sha384
group 20
crypto ikev2 policy COUNTRY-IKEV2
proposal COUNTRY-IKEV2
crypto ipsec transform-set COUNTRY-GCM esp-gcm 256
mode transport
crypto ikev2 keyring AU_CORE_TO_VA
peer USA_VA_CORE_EDGE
identity key-id USA_VA_CORE_EDGE
pre-shared-key local ZTLni2h^5e(TLY^ys%rd!%vNUHc!mbPEnVmld#2v
pre-shared-key remote N8(85zKg@0Gzxx1D5JLt^f)KN2UMsN@Qwn4GbBQl
crypto ikev2 keyring AU_CORE_TO_TX
peer USA_TX_CORE_EDGE
identity key-id USA_TX_CORE_EDGE
pre-shared-key local WFDcNDR8tElYcnDdcT^I@zzX7wKxe8PlFz5OhGW$
pre-shared-key remote viF@%4gIqFj#ogLcktFib%ASy*R*#CR#WDa%2L9g
interface Tunnel65011
ip nhrp network-id 65011
ip nhrp map multicast dynamic
ip nhrp redirect
tunnel mode gre multipoint
tunnel key 65011
tunnel protection ipsec profile COUNTRY-DMVPN
!
! ======================================================================
! FP1010 ASA-MODE PROTOCOL BREAK
! ======================================================================
hostname AU_CORE-FW
interface GigabitEthernet1/1
nameif outside
security-level 0
interface GigabitEthernet1/2
nameif inside
security-level 100
object network COUNTRY-PARENT
subnet 10.42.0.0 255.255.0.0
access-list OUTSIDE-IN extended permit udp any interface outside eq 500
access-list OUTSIDE-IN extended permit udp any interface outside eq 4500
access-list PARTNER-ISOLATION extended deny ip object COUNTRY-PARENT object COUNTRY-PARENT
access-list PARTNER-ISOLATION extended permit ip object COUNTRY-PARENT object-group SHARED-SERVICES
crypto ikev1 policy 10
authentication pre-share
encryption aes-256
hash sha256
group 14
lifetime 86400
!
! ======================================================================
! INSIDE OVERLAY ISR1111
! ======================================================================
hostname AU_CORE-OVERLAY
ip vrf VRF_AU
rd 65011:100
router eigrp 65011
address-family ipv4 unicast vrf VRF_AU autonomous-system 65011
eigrp router-id 10.250.2.1
topology base
distribute-list prefix COUNTRY-IN in
distribute-list prefix COUNTRY-OUT out
exit-address-family
ip prefix-list COUNTRY-OUT permit 10.42.0.0/16
ip prefix-list COUNTRY-IN permit 10.255.0.0/16
end