Current configuration : 7563 bytes
  !
  ! Last configuration change at 07:37:40 UTC Fri Oct 19 2001
  ! NVRAM config last updated at 07:37:59 UTC Fri Oct 19 2001
  !
  version 12.2
  no service single-slot-reload-enable
  service timestamps debug datetime msec localtime
  service timestamps log datetime msec localtime
  service password-encryption
  !
  hostname ios
  !
  logging buffered 131072 informational
  logging rate-limit console 10 except errors
  ip subnet-zero
  no ip source-route
  !
  !
  no ip finger
  no ip ftp passive
  no ip domain-lookup
  ip domain-name ipsec2001.hsc.fr
  ip host nc0191.netcelo.net 192.70.106.203
  !
  ip audit notify log
  ip audit po max-events 100
  no ip dhcp-client network-discovery
  !
  crypto ca identity IDEALX-CA
   enrollment retry count 5
   enrollment url http://192.70.106.211:80/cgi-bin/pkiclient.exe
   crl optional
  crypto ca certificate chain IDEALX-CA
   certificate 12
    30820229 30820192 A0030201 02020112 300D0609 2A864886 F70D0101 05050030
    28310D30 0B060355 040A1304 61636D65 31173015 06035504 03130E6F 70657261
    74696F6E 616C2043 41301E17 0D303131 30303130 30303030 305A170D 30323130
    31383039 33343139 5A302531 23302106 092A8648 86F70D01 09021614 696F732E
    69707365 63323030 312E6873 632E6672 305C300D 06092A86 4886F70D 01010105
    00034B00 30480241 00D73ABC 6832FCE9 2D8BEB0F 85E31E58 8E7C846F 5B40B46B
    A5BF37E9 651D97BA 514A983F D725E0EF 8F067771 686F7CCC 55F40AC5 2C0E5064
    CDCD1D6A 387AA50B 3D020301 0001A381 A93081A6 30090603 551D1304 02300030
    1D060355 1D0E0416 04140A41 2BEAF3AD 0CF5B129 6BEA7974 ACBD9064 EFDA3049
    0603551D 23044230 408014F6 FE77DEB3 CBCF5BAB 3A89E6C1 9968DBBC 3B91C3A1
    25A42330 21310D30 0B060355 040A1304 61636D65 3110300E 06035504 03130772
    6F6F7420 43418201 01301F06 03551D11 04183016 8214696F 732E6970 73656332
    3030312E 6873632E 6672300E 0603551D 0F0101FF 04040302 0780300D 06092A86
    4886F70D 01010505 00038181 000A338D D7E7CF07 0445614A A0DB8D02 278CD96C
    CD8A74C8 5251CBEE 6A26B034 03F38937 A81BA9B0 BDB10FF4 15359213 955A7C97
    EB1FB9A2 88F291C8 D36643BE E9A0ED78 9A8CE1D0 46FE9086 6127C17F 05DD70D7
    8A675DA0 743D012B 5218C567 CF206390 4281E77E 405B823C 1C71FBC6 24E9B332
    BB74A805 EEDFBD33 FDBA2EE7 FD
    quit
   certificate ca 0E
    30820268 308201D1 A0030201 0202010E 300D0609 2A864886 F70D0101 04050030
    28310D30 0B060355 040A1304 61636D65 31173015 06035504 03130E6F 70657261
    74696F6E 616C2043 41301E17 0D303131 30313830 38323430 375A170D 30363130
    31373038 32343037 5A302831 0D300B06 0355040A 13046163 6D653117 30150603
    55040313 0E6F7065 72617469 6F6E616C 20434130 819F300D 06092A86 4886F70D
    01010105 0003818D 00308189 02818100 C3F7321C AAA7BDDB 12FB2244 04A601C3
    BCAA866D 7F784DD2 397A84DE 295D866E 30B108C8 B8BEBAC9 4975D7D8 E1DB7DFC
    296D5988 60707BF5 297948BF 247C8201 8363B7AE 79AA9DBD EA17D95B 98506969
    EEB31B4F 93384C0A 33749282 5F496EDA 4AE42AD0 73FD085B 231FA8E1 951F0B12
    989AFEB7 0E2F66C5 9D0EF5C5 97A8E753 02030100 01A381A1 30819E30 0F060355
    1D130101 FF040530 030101FF 301D0603 551D0E04 160414F6 FE77DEB3 CBCF5BAB
    3A89E6C1 9968DBBC 3B91C330 49060355 1D230442 30408014 F6FE77DE B3CBCF5B
    AB3A89E6 C19968DB BC3B91C3 A125A423 3021310D 300B0603 55040A13 0461636D
    65311030 0E060355 04031307 726F6F74 20434182 0101300E 0603551D 0F0101FF
    04040302 01063011 06096086 480186F8 42010104 04030200 07300D06 092A8648
    86F70D01 01040500 03818100 C3BC9809 F124BEE0 67C6C000 20613F2B A2F2822C
    77FD95E8 E2CD2A13 34605C62 104656FB 51D6C3A2 171EDC36 86A4B3CA 1AFCDFC7
    FEDD58EB EF1378F8 7B53A740 8A736B58 DEC77A7E C2B21532 AF69F220 537912F0
    187D22FA A2CBBC5F C2062648 E4002152 7215E20D 682A7C6A 4B6D0701 66EA907A
    24086232 48DFAAB3 80FF05B9
    quit
  !
  crypto isakmp policy 10
   encr 3des
   group 2
   lifetime 28800
  crypto isakmp identity hostname
  !
  !
  crypto ipsec transform-set NETCELO-TRANSFORM-SET esp-3des esp-sha-hmac

  !
  crypto map NETCELO-CHIFFREMENT 132 ipsec-isakmp
   set peer 192.70.106.201
   set transform-set NETCELO-TRANSFORM-SET
   match address 132
  crypto map NETCELO-CHIFFREMENT 133 ipsec-isakmp
   set peer 192.70.106.196
   set transform-set NETCELO-TRANSFORM-SET
   match address 133
  crypto map NETCELO-CHIFFREMENT 134 ipsec-isakmp
   set peer 192.70.106.205
   set transform-set NETCELO-TRANSFORM-SET
   match address 134
  crypto map NETCELO-CHIFFREMENT 135 ipsec-isakmp
   set peer 192.70.106.209
   set transform-set NETCELO-TRANSFORM-SET
   match address 135
  crypto map NETCELO-CHIFFREMENT 136 ipsec-isakmp
   set peer 192.70.106.200
   set transform-set NETCELO-TRANSFORM-SET
   match address 136
  crypto map NETCELO-CHIFFREMENT 137 ipsec-isakmp
   set peer 192.70.106.198
   set transform-set NETCELO-TRANSFORM-SET
   match address 137
  crypto map NETCELO-CHIFFREMENT 138 ipsec-isakmp
   set peer 192.70.106.213
   set transform-set NETCELO-TRANSFORM-SET
   match address 138
  crypto map NETCELO-CHIFFREMENT 139 ipsec-isakmp
   set peer 192.70.106.207
   set transform-set NETCELO-TRANSFORM-SET
   match address 139
  crypto map NETCELO-CHIFFREMENT 140 ipsec-isakmp
   set peer 192.70.106.199
   set transform-set NETCELO-TRANSFORM-SET
   match address 140
  !
  call rsvp-sync
  !
  !
  !
  !
  !
  !
  !
  !
  interface FastEthernet0/0
   description connected to network 10.202.0.0
   ip address 10.202.0.1 255.255.0.0
   ip nat inside
   duplex auto
   speed auto
   no cdp enable
  !
  interface BRI0/0
   no ip address
   shutdown
   cdapi buffers regular 0
   cdapi buffers raw 0
   cdapi buffers large 0
   no cdp enable
  !
  interface FastEthernet0/1
   description connected to network 192.70.106.192
   ip address 192.70.106.202 255.255.255.192
   ip nat outside
   duplex auto
   speed auto
   no cdp enable
   crypto map NETCELO-CHIFFREMENT
  !
  interface BRI0/1
   no ip address
   shutdown
   cdapi buffers regular 0
   cdapi buffers raw 0
   cdapi buffers large 0
   no cdp enable
  !
  ip classless
  ip route 0.0.0.0 0.0.0.0 192.70.106.254
  no ip http server
  !
  !
  access-list 132 permit ip 10.202.0.0 0.0.255.255 10.201.0.0 0.0.255.255 log
  access-list 133 permit ip 10.202.0.0 0.0.255.255 10.196.0.0 0.0.255.255 log
  access-list 134 permit ip 10.202.0.0 0.0.255.255 10.205.0.0 0.0.255.255 log
  access-list 135 permit ip 10.202.0.0 0.0.255.255 10.209.0.0 0.0.255.255 log
  access-list 136 permit ip 10.202.0.0 0.0.255.255 10.200.0.0 0.0.255.255 log
  access-list 137 permit ip 10.202.0.0 0.0.255.255 10.198.0.0 0.0.255.255 log
  access-list 138 permit ip 10.202.0.0 0.0.255.255 10.213.0.0 0.0.255.255 log
  access-list 139 permit ip 10.202.0.0 0.0.255.255 10.207.0.0 0.0.255.255 log
  access-list 140 permit ip 10.202.0.0 0.0.255.255 10.199.0.0 0.0.255.255 log
  no cdp run
  !
  dial-peer cor custom
  !
  !
  !
  !
  !
  line con 0
   exec-timeout 120 0
   login
   transport input none
   stopbits 1
  line aux 0
  line vty 5 15
   login
  !
  ntp clock-period 17179504
  ntp server 192.70.106.204 source FastEthernet0/1
  !
  end