version 12.3
no service pad
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname asd-cap-dr03
!
boot-start-marker
boot system disk0:/c7200-jk9s-mz.123-20.bin
boot-end-marker
!
logging buffered 65535 debugging
enable secret <removed>
!
clock timezone CET 1
clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 2:00
aaa new-model
!
!
aaa authentication login default group tacacs+ local
aaa authentication login CONSOLE local
aaa authentication ppp default group radius local
aaa authentication ppp PPP-ISDN local group radius
aaa authorization exec default local group tacacs+ 
aaa authorization commands 1 default group tacacs+ if-authenticated 
aaa authorization commands 15 default group tacacs+ if-authenticated 
aaa authorization network default group radius 
aaa authorization network PPP-ISDN group radius 
aaa accounting delay-start 
aaa session-id common
ip subnet-zero
ip flow-cache timeout active 1
!
!
ip tcp path-mtu-discovery
ip telnet source-interface Loopback0
ip tftp source-interface Loopback0
no ip ftp passive
no ip domain lookup
!
no ip bootp server
!
ip vrf test-klant
 rd 8608:140
 import map radius-import
 route-target export 8608:140
 route-target import 8608:140
 route-target import 8608:90
!
ip cef
virtual-profile virtual-template 2
vpdn enable
vpdn multihop
vpdn source-ip 195.18.85.3
vpdn search-order domain  
vpdn domain-delimiter / suffix
!
vpdn-group 1
 description *** VPDN-Tunnel from asd-tc3-ap01 & ap02 ***
 accept-dialin
  protocol l2tp
  virtual-template 2
 terminate-from hostname AS5350-All
 l2tp tunnel password 7 030752180500
!
clns routing
no tag-switching ip propagate-ttl forwarded
tag-switching tdp router-id Loopback0
!
!
!
!
!
!
!
!
!
!
!
!
username beheer secret <removed>
username asd-tc3-ap01 password 7 121A0C041104
username AS5350-All password 7 00071A150754
!
! 
!         
!
!
!
interface Loopback0
 description *** management & routing loopback ***
 ip address 10.8.1.6 255.255.255.255
!
interface Loopback1
 description *** VPDN-Tunnel termination & Radius Source IP ***
 ip address 195.18.85.3 255.255.255.255
!
interface Loopback1132
 description *** Customer Loopback ***
 ip vrf forwarding test-klant
 ip address 192.168.1.1 255.255.255.255
!
interface FastEthernet0/0
 description *** To asd-cap-as01-gi1-0-5 [10.10.3.1] (jja:10/08/2010) ***
 ip address 10.10.3.3 255.255.255.0
 ip router isis 
 load-interval 30
 duplex full
 mpls label protocol ldp
 tag-switching mtu 1536
 tag-switching ip
 isis circuit-type level-1
!
interface FastEthernet1/0
 no ip address
 shutdown
 duplex half
!
interface FastEthernet2/0
 no ip address
 shutdown
 duplex half
!
interface FastEthernet3/0
 description *** To asd-cap-as02-gi1-0-5 [10.10.4.4] (mbu:05/07/2010) ***
 ip address 10.10.4.1 255.255.255.0
 ip router isis 
 load-interval 30
 duplex full
 mpls label protocol ldp
 tag-switching mtu 1536
 tag-switching ip
 isis circuit-type level-1
!
interface FastEthernet4/0
 description *** To asd-cap-as04-gi1-0-6 (mbu:09/07/2010) ***
 no ip address
 duplex full
!
interface FastEthernet4/0.54
 description *** To Radius-LAN ***
 encapsulation dot1Q 54
 ip address 195.18.104.133 255.255.255.248
!
interface FastEthernet4/0.1503
 description *** VPDN Tunnel Terminatie ***
 encapsulation dot1Q 1503
 ip address 172.31.255.1 255.255.255.248
!
interface Virtual-Template2
 description *** Test with Radius-Auth. ***
 ip unnumbered Loopback1
 ip tcp header-compression iphc-format
 mpls label protocol ldp
 tag-switching ip
 no peer default ip address
 ppp authentication chap
 ppp multilink
 ppp multilink fragment delay 17
 ppp multilink interleave
 ppp multilink multiclass
 ip rtp header-compression iphc-format
!
router isis 
 net 49.21a0.0001.0100.0800.1006.00
 is-type level-1
 metric-style wide
 max-lsp-lifetime 65535
 no hello padding
 log-adjacency-changes all
 redistribute connected route-map REDIST_CONNECTED_TO_ISIS level-1
 redistribute static ip route-map REDIST_STATIC_TO_ISIS level-1
 passive-interface Loopback0
!
router bgp 8608
 no bgp default ipv4-unicast
 bgp log-neighbor-changes
 neighbor VPNv4-RR peer-group
 neighbor VPNv4-RR remote-as 8608
 neighbor VPNv4-RR update-source Loopback0
 neighbor 10.8.0.15 peer-group VPNv4-RR
 neighbor 10.8.1.11 peer-group VPNv4-RR
 neighbor 10.8.2.11 peer-group VPNv4-RR
 !
 address-family ipv4
 redistribute connected
 redistribute static
 no auto-summary
 no synchronization
 bgp dampening 1
 exit-address-family
 !
 address-family vpnv4
 neighbor VPNv4-RR send-community extended
 neighbor 10.8.0.15 activate
 neighbor 10.8.1.11 activate
 neighbor 10.8.2.11 activate
 bgp dampening 1
 exit-address-family
 !
 address-family ipv4 vrf test-klant
 redistribute connected
 redistribute static
 no auto-summary
 no synchronization
 bgp dampening 1
 exit-address-family
!
ip classless
ip route 195.18.85.193 255.255.255.255 172.31.255.2
no ip http server
no ip http secure-server
ip tacacs source-interface Loopback0
!         
ip extcommunity-list 1 permit rt 8608:1
ip extcommunity-list 2 permit rt 8608:90
ip bgp-community new-format
!
!
ip prefix-list DENY_DEFAULT_ONLY seq 10 deny 0.0.0.0/0
ip prefix-list DENY_DEFAULT_ONLY seq 20 permit 0.0.0.0/0 le 32
!
ip prefix-list PERMIT_DEFAULT_ONLY seq 10 permit 0.0.0.0/0
ip prefix-list PERMIT_DEFAULT_ONLY seq 65000 deny 0.0.0.0/0 le 32
!
ip prefix-list REDIST_CONNECTED_TO_ISIS seq 10 permit 10.8.1.6/32
ip prefix-list REDIST_CONNECTED_TO_ISIS seq 65000 deny 0.0.0.0/0 le 32
!
ip prefix-list REDIST_STATIC_TO_ISIS seq 65000 deny 0.0.0.0/0 le 32
!
ip access-list standard mplsvpn-beheer-routes
 <removed>
ip access-list standard radius-routes
 permit 195.18.104.128 0.0.0.7
ip radius source-interface Loopback1 
!
route-map REDIST_CONNECTED_TO_ISIS permit 10
 match ip address prefix-list REDIST_CONNECTED_TO_ISIS
!
route-map radius-import permit 10
 match ip address radius-routes
 match extcommunity 2
!
route-map REDIST_STATIC_TO_ISIS permit 10
 match ip address prefix-list REDIST_STATIC_TO_ISIS
!
route-map PERMIT_DEFAULT_ONLY permit 10
 match ip address prefix-list PERMIT_DEFAULT_ONLY
!
route-map DENY_DEFAULT_ONLY deny 10
 match ip address prefix-list DENY_DEFAULT_ONLY
!
route-map mplsvpn-beheer-import permit 10
 match ip address mplsvpn-beheer-routes
 match extcommunity 1
!
route-map mplsvpn-beheer-import deny 20
 match extcommunity 1
!
route-map mplsvpn-beheer-import permit 30
!
tacacs-server host <removed>
tacacs-server timeout 2
tacacs-server directed-request
tacacs-server key <removed>
!
radius-server host 195.18.104.132 auth-port 1812 acct-port 1813
radius-server deadtime 20
radius-server key 7 021201481F0D0A38
!
!
!
!
gatekeeper
 shutdown
!
line con 0
 exec-timeout 60 0
 login authentication CONSOLE
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 session-timeout 60 
 access-class 1 in
 exec-timeout 60 0
 transport input ssh
 transport output telnet ssh
!