! Country core stack for Australia at Canberra
! ======================================================================
! INTERNET ISR1111
! ======================================================================
hostname AU_CORE-EDGE





























interface GigabitEthernet0/0/0
 description Australia Country Core WAN interface
 ip address 192.0.2.34 255.255.255.252
 no shutdown















interface GigabitEthernet0/1/0
 description Australia Country Core DIRTY_TRANSIT interface
 ip address 172.20.0.33 255.255.255.252
 no shutdown












































crypto ikev2 proposal COUNTRY-IKEV2
 encryption aes-gcm-256
 prf sha384
 group 20
crypto ikev2 policy COUNTRY-IKEV2
 proposal COUNTRY-IKEV2
crypto ipsec transform-set COUNTRY-GCM esp-gcm 256
 mode transport










crypto ikev2 keyring AU_CORE_TO_VA
 peer USA_VA_CORE_EDGE
  identity key-id USA_VA_CORE_EDGE
  pre-shared-key local ZTLni2h^5e(TLY^ys%rd!%vNUHc!mbPEnVmld#2v
  pre-shared-key remote N8(85zKg@0Gzxx1D5JLt^f)KN2UMsN@Qwn4GbBQl



crypto ikev2 keyring AU_CORE_TO_TX
 peer USA_TX_CORE_EDGE
  identity key-id USA_TX_CORE_EDGE
  pre-shared-key local WFDcNDR8tElYcnDdcT^I@zzX7wKxe8PlFz5OhGW$
  pre-shared-key remote viF@%4gIqFj#ogLcktFib%ASy*R*#CR#WDa%2L9g
















interface Tunnel65011
 ip nhrp network-id 65011
 ip nhrp map multicast dynamic
 ip nhrp redirect
 tunnel mode gre multipoint
 tunnel key 65011
 tunnel protection ipsec profile COUNTRY-DMVPN
!
! ======================================================================
! FP1010 ASA-MODE PROTOCOL BREAK
! ======================================================================
hostname AU_CORE-FW
interface GigabitEthernet1/1
 nameif outside
 security-level 0
interface GigabitEthernet1/2
 nameif inside
 security-level 100
object network COUNTRY-PARENT
 subnet 10.42.0.0 255.255.0.0
access-list OUTSIDE-IN extended permit udp any interface outside eq 500
access-list OUTSIDE-IN extended permit udp any interface outside eq 4500
access-list PARTNER-ISOLATION extended deny ip object COUNTRY-PARENT object COUNTRY-PARENT
access-list PARTNER-ISOLATION extended permit ip object COUNTRY-PARENT object-group SHARED-SERVICES
crypto ikev1 policy 10
 authentication pre-share
 encryption aes-256
 hash sha256
 group 14
 lifetime 86400
!
! ======================================================================
! INSIDE OVERLAY ISR1111
! ======================================================================
hostname AU_CORE-OVERLAY
ip vrf VRF_AU
 rd 65011:100
router eigrp 65011
 address-family ipv4 unicast vrf VRF_AU autonomous-system 65011
  eigrp router-id 10.250.2.1
  topology base
  distribute-list prefix COUNTRY-IN in
  distribute-list prefix COUNTRY-OUT out
 exit-address-family
ip prefix-list COUNTRY-OUT permit 10.42.0.0/16
ip prefix-list COUNTRY-IN permit 10.255.0.0/16
end