!
!
version 15.7
service timestamps debug datetime msec show-timezone
service timestamps log datetime msec show-timezone
service password-encryption
!
hostname BZ-RTR01
!
boot-start-marker
boot system flash:c2900-universalk9-mz.SPA.157-3.M3.bin
boot-end-marker
!
!
enable secret 5 $1$XV20$HamsunSO2gsV/SganDfwn1
!
aaa new-model
!
!
!
!
!
!
!
!
aaa session-id common
clock timezone YEKT 5 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!


!
ip dhcp excluded-address 10.6.248.100 10.6.248.250
ip dhcp excluded-address 10.6.248.1
ip dhcp excluded-address 10.6.248.200 10.6.248.201
ip dhcp excluded-address 10.6.248.203
ip dhcp excluded-address 10.6.248.204 10.6.248.205
ip dhcp excluded-address 10.6.248.250
ip dhcp excluded-address 10.6.248.2 10.6.248.5
!
!
!
ip flow-cache timeout active 1
ip domain name nnnn.loc
ip name-server 10.6.0.103
ip name-server 10.6.0.203
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
template 10
!
!
cts logging verbose
!
crypto pki trustpoint TP-self-signed-732317511
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-732317511
 revocation-check none
 rsakeypair TP-self-signed-732317511
!
crypto pki trustpoint test_trustpoint_config_created_for_sdm
 subject-name e=sdmtest@sdmtest.com
 revocation-check crl
!
!
crypto pki certificate chain TP-self-signed-732317511
 certificate self-signed 01 nvram:IOS-Self-Sig#1.cer
crypto pki certificate chain test_trustpoint_config_created_for_sdm
voice-card 0
 dspfarm
 dsp services dspfarm
!
!
no voice hunt unassigned-number
!
voice service pots
!
voice service voip
 ip address trusted list
  ipv4 172.30.255.174
  ipv4 10.223.41.40
  ipv4 10.56.82.34
  ipv4 10.16.32.201
  ipv4 10.16.32.202
  ipv4 10.6.248.100
  ipv4 10.8.250.0 255.255.255.0
  ipv4 10.8.250.1
  ipv4 192.168.56.1
  ipv4 10.6.248.1
  ipv4 10.8.250.200
  ipv4 10.6.248.200
  ipv4 10.6.250.100
  ipv4 10.223.44.142
  ipv4 10.6.248.10
 allow-connections sip to sip
 no supplementary-service sip moved-temporarily
 no supplementary-service sip refer
 no supplementary-service sip handle-replaces
 redirect ip2ip
 fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback none
 no fax-relay sg3-to-g3
 sip
  bind media source-interface GigabitEthernet0/2.250
  min-se 300
  registrar server expires max 600 min 60
  no update-callerid
  no silent-discard untrusted
  sip-profiles inbound
  sip-profiles 100
  no call service stop
!
!
voice class uri 3 sip
 host ipv4:10.6.248.200
!
voice class uri 4 sip
 host cucm250.nnnn.loc
voice class codec 1
 codec preference 1 g711ulaw
 codec preference 2 g711alaw
 codec preference 3 g729br8
!
!
voice class sip-profiles 10
 request INVITE sip-header From modify "<sip:333333333@(.*)>" "<sip:333333333@192.168.56.166>"
 request ACK sip-header From modify "<sip:333333333@(.*)>" "<sip:333333333@192.168.56.166>"
!
voice class sip-profiles 100
 request ANY sip-header From modify "<sip:7777777777@(.*)>" "<sip:7777777777@10.56.82.34>"
 request REGISTER sip-header From modify "<sip:7777777777@(.*)>" "<sip:7777777777@10.56.82.34>"
 request ANY sip-header To modify "<sip:7777777777@(.*)>" "<sip:7777777777@10.56.82.34>"
 request ANY sip-header From modify "<sip:7171717171@(.*)>" "<sip:7171717171@10.56.82.34>"
 request REGISTER sip-header From modify "<sip:7171717171@(.*)>" "<sip:7171717171@10.56.82.34>"
 request ANY sip-header To modify "<sip:7171717171@(.*)>" "<sip:7171717171@10.56.82.34>"
 request ACK sip-header From modify "<sip:7777777777@(.*)>" "<sip:7777777777@10.223.44.142>"
 request INVITE sip-header From modify "<sip:7777777777@(.*)>" "<sip:7777777777@10.223.44.142>"
!
voice class sip-profiles 111
 request INVITE sip-header From modify "sip:(.*)@" "sip:98\1@"
!
voice class sip-profiles 112
 request INVITE sip-header From modify "sip:(.*)@" "sip:8\1@"
!
voice class sip-profiles 115
 request INVITE sip-header From modify "sip:(.*)@" "sip:(<=\d{1})\d+1\@"
!
!
voice class sip-options-keepalive 1
!
!
voice iec syslog
!
!
voice translation-rule 1
 rule 1 /.*/ /333333333/
 rule 2 /6001/ /39392/
!
voice translation-rule 2
 rule 1 /39391/ /6111/
 rule 2 /39392/ /6001/
!
voice translation-rule 3
 rule 1 /7171717171/ /6001/
 rule 2 /7777777777/ /6111/
!
voice translation-rule 4
 rule 1 /.*/ /7777777777/
!
voice translation-rule 5
 rule 1 /^98/ //
!
voice translation-rule 6
 rule 1 /^9/ //
!
!
voice translation-profile 39391
 translate called 2
!
voice translation-profile 76226
 translate calling 5
 translate called 3
!
voice translation-profile 9
 translate called 6
!
voice translation-profile BeelineSIP
 translate calling 1
!
voice translation-profile ReservTSP
 translate calling 4
 translate called 5
!
voice translation-profile ReservTSP_Mobile
 translate calling 4
 translate called 5
!
!
!
!
application
 service its flash0:/its.tcl
  param aa-pilot 6111
  param queue-manager-debugs 1
  param operator 6000
 !
!
no vxml logging-tag
license udi pid CISCO2921/K9 sn FCZ1850706F
license boot module c2900 technology-package securityk9
license boot module c2900 technology-package uck9
license boot module c2900 technology-package datak9
hw-module pvdm 0/0
!
!
!
archive
 log config
  logging enable
  hidekeys
 path tftp://10.6.20.90/$H$T
 write-memory
file privilege 0
!
redundancy
!
!
!
!
!
!
class-map match-any voice-control
 match protocol sip
class-map match-any ssh
 match protocol ssh
class-map match-any video
 match protocol rtp video
class-map match-any audio
 match protocol rtp audio
!
policy-map voip
 class audio
  priority percent 25
 class video
  bandwidth remaining percent 10
 class ssh
  bandwidth remaining percent 4
 class voice-control
  priority percent 4
 class class-default
  fair-queue
!
!
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/2
 no ip address
 ip nbar protocol-discovery ipv4
 ip flow egress
 duplex auto
 speed auto
!
interface GigabitEthernet0/2.250
 encapsulation dot1Q 250
 ip address 10.6.248.10 255.255.252.0
!
interface GigabitEthernet0/2.260
 description SIP Vimpelkom
 encapsulation dot1Q 260
 ip address 192.168.56.166 255.255.255.252
 ip nbar protocol-discovery ipv4
 ip flow egress
!
interface GigabitEthernet0/2.270
 description SIP MTS
 encapsulation dot1Q 270
 ip address 10.223.44.142 255.255.255.252
 ip nbar protocol-discovery ipv4
!
!
ip forward-protocol nd
!
no ip http server
ip http authentication local
ip http secure-server
ip http path flash:/CME/GUI
ip flow-export source Port-channel1.20
ip flow-export version 5 origin-as
ip flow-export destination 10.6.0.40 9996
!
ip route 0.0.0.0 0.0.0.0 10.6.248.1
ip route 10.6.99.0 255.255.255.0 172.31.6.1
ip route 10.56.82.0 255.255.255.0 10.223.44.141
ip route 10.56.82.34 255.255.255.255 10.223.44.141
ip route 10.223.41.0 255.255.255.0 10.223.44.141
ip route 192.168.56.1 255.255.255.255 192.168.56.165
ip route 192.168.56.2 255.255.255.255 192.168.56.165
!
ip access-list standard SSH
 permit 10.6.0.23
 permit 10.6.20.90
 permit 10.6.99.11
 permit 10.6.20.149
 deny   any log
ip access-list standard TFTP
 permit 0.0.0.0 255.255.252.0
 deny   any log
!
ip access-list extended voice_traffic
 permit ip host 10.6.248.1 host 10.66.228.107
 permit ip host 10.66.228.107 host 10.6.248.1
!
ip sla responder
logging origin-id hostname
logging host 10.6.0.23
logging host 10.6.20.90
logging host 10.6.0.12 transport tcp port 8514
logging host 10.6.0.36 transport udp port 5152
logging host 10.6.0.36 transport udp port 5154
ipv6 ioam timestamp
!
!
snmp-server group nnnn v3 priv
snmp-server view Viewnnnn iso included
snmp-server ifindex persist
no snmp-server enable traps entity-sensor threshold
snmp-server host 10.6.0.23 nnnn
snmp-server host 10.6.0.32 nnnn
snmp-server host 10.6.0.35 nnnn
snmp-server host 10.6.0.31 public
snmp-server host 10.6.20.90 public
snmp ifmib ifalias long
access-list 1 deny   10.6.20.91
!
!
!
control-plane
!
!
voice-port 0/0/0
 compand-type a-law
 cptone RU
!
voice-port 0/0/1
 compand-type a-law
 cptone RU
!
voice-port 0/0/2
!
voice-port 0/0/3
 !
 !
 !
 !
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
dspfarm profile 1 transcode universal 
 codec g711alaw
 codec g711ulaw
 codec g729r8
 codec g729abr8
 codec g729ar8
 maximum sessions 12
 associate application CUBE
!
dial-peer voice 8 voip
 description *Incoming Call from BeeLine*
 translation-profile outgoing BeelineSIP
 destination-pattern 8[3489].........
 session protocol sipv2
 session target ipv4:192.168.56.1
 voice-class codec 1 
 voice-class sip dtmf-relay force rtp-nte
 no voice-class sip outbound-proxy   
 voice-class sip early-offer forced
 voice-class sip profiles 10
 voice-class sip bind control source-interface GigabitEthernet0/2.260
 voice-class sip bind media source-interface GigabitEthernet0/2.260
 dtmf-relay rtp-nte
 clid strip name
!
dial-peer voice 1 voip
 description *Incoming Call from BeeLine*
 translation-profile incoming 39391
 session protocol sipv2
 session target ipv4:192.168.56.1
 incoming called-number 39391
 voice-class codec 1 
 voice-class sip dtmf-relay force rtp-nte
 no voice-class sip outbound-proxy   
 no voice-class sip early-offer forced
 voice-class sip profiles 112 inbound
 voice-class sip bind control source-interface GigabitEthernet0/2.260
 voice-class sip bind media source-interface GigabitEthernet0/2.260
 dtmf-relay rtp-nte
!
dial-peer voice 6111 voip
 service its
 destination-pattern 6111
 redirect ip2ip
 session protocol sipv2
 session target ipv4:10.6.248.10
 incoming called-number 6111
 voice-class sip bind control source-interface GigabitEthernet0/2.250
 voice-class sip bind media source-interface GigabitEthernet0/2.250
 dtmf-relay sip-notify
 codec g711ulaw
 no vad
!
dial-peer voice 6001 pots
 destination-pattern 6001
 fax rate voice
 port 0/0/0
 no sip-register
!
dial-peer voice 22 voip
 preference 1
 destination-pattern 6[45]..
 redirect ip2ip
 session protocol sipv2
 session target ipv4:10.8.250.1
 voice-class codec 1 
 dtmf-relay sip-notify
 no vad
!
dial-peer voice 70 voip
 description *Incoming Call from BeeLine*
 translation-profile incoming 39391
 session protocol sipv2
 session target sip-server
 incoming called-number 39392
 voice-class sip dtmf-relay force rtp-nte
 voice-class sip profiles 112 inbound
 voice-class sip bind control source-interface GigabitEthernet0/2.260
 voice-class sip bind media source-interface GigabitEthernet0/2.260
 dtmf-relay rtp-nte
!
dial-peer voice 76226 voip
 description *Incoming Call from Reserv TSP*
 translation-profile incoming 76226
 session protocol sipv2
 session target sip-server
 incoming called-number 7777777777
 voice-class sip dtmf-relay force rtp-nte
 voice-class sip bind control source-interface GigabitEthernet0/2.270
 voice-class sip bind media source-interface GigabitEthernet0/2.270
 dtmf-relay sip-notify
!
dial-peer voice 9 voip
 description To_Reserv TSP
 translation-profile outgoing 9
 destination-pattern 98[3489].........
 session protocol sipv2
 session target ipv4:10.56.82.34
 voice-class codec 1 
 voice-class sip dtmf-relay force rtp-nte
 no voice-class sip outbound-proxy   
 voice-class sip early-offer forced
 dtmf-relay rtp-nte
 clid strip name
!
dial-peer voice 3000 voip
 destination-pattern 6[013]..
 redirect ip2ip
 session protocol sipv2
 session target ipv4:10.6.248.200
 voice-class codec 1 
 dtmf-relay rtp-nte
 no vad
!
dial-peer voice 3 voip
 description Incoming calls from CUCM-node
 session protocol sipv2
 session target sip-server
 incoming uri via 3
 dtmf-relay rtp-nte
 codec g711alaw
 no vad
!

dial-peer voice 810 voip
 description To_Beeline InterNational
 translation-profile outgoing BeelineSIP
 destination-pattern 810T
 session protocol sipv2
 session target ipv4:192.168.56.1
 voice-class codec 1 
 voice-class sip dtmf-relay force rtp-nte
 no voice-class sip outbound-proxy   
 voice-class sip early-offer forced
 voice-class sip profiles 10
 voice-class sip bind control source-interface GigabitEthernet0/2.260
 voice-class sip bind media source-interface GigabitEthernet0/2.260
 dtmf-relay rtp-nte
 clid strip name
!
!
presence
 presence call-list
 max-subscription 400
 watcher all
 allow subscribe
!
sip-ua
 credentials number 7777777777 username 7777777777 password 7 061F0A03491F1116141320 realm 10.56.82.34
 authentication username 7777777777 password 7 150B0E2E017B332B393707 realm 10.56.82.34
 registrar ipv4:10.223.41.40 expires 180
 sip-server ipv4:10.223.41.40
 connection-reuse
 host-registrar
 presence enable
!
!
!
gatekeeper
 shutdown
!
!
 vstack
alias exec ac sh call active voice brief
alias exec hi sh call hi voice brief
alias exec ca sh call active voice com
alias exec un undeb all
alias exec hid sh call hi voice id
privilege exec level 3 show startup-config
privilege exec level 3 show running-config view full
privilege exec level 3 show running-config view
privilege exec level 3 show running-config
privilege exec level 3 show
!
line con 0
 exec-timeout 0 0
line aux 0
 exec-timeout 0 0
 no activation-character
 no editing
 transport input telnet
 transport output telnet
 escape-character NONE
 stopbits 1
 speed 115200
line 2
 no activation-character
 no exec
 transport preferred none
 transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
 stopbits 1
line vty 0 4
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 transport input ssh
 transport output telnet ssh
line vty 5 15
 exec-timeout 0 0
 privilege level 15
 transport input ssh
 transport output ssh
!
scheduler allocate 20000 1000
ntp master 3
ntp update-calendar
ntp server ntp.msk-ix.ru
ntp server 10.6.0.1 prefer
!
end