!
version 12.3
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname XCS_3661
!
boot-start-marker
boot system flash:c3660-jk9s2-mz.123-14.T7.bin
boot-end-marker
!
enable password 7 100342405344
!
no aaa new-model
!
resource policy
!
ip subnet-zero
!
!
ip cef
no ip domain lookup
no ip dhcp use vrf connected
!
!
carrier-id test
!
!
voice call send-alert
!
voice service pots
!
voice service voip
 no allow-connections any to pots
 no allow-connections pots to any
 allow-connections h323 to h323
 allow-connections h323 to sip
 allow-connections sip to h323
 h323
 sip
!
!
!
voice class codec 1
 codec preference 1 g729r8
 codec preference 2 g723r53
 codec preference 3 g723r63
!
!
voice source-group test
 carrier-id source test
 carrier-id target test
 h323zone-id test
!
!
!
dial-control-mib retain-timer 60
dial-control-mib max-size 1200
!
!
no crypto isakmp ccm
!
!
!
!
interface FastEthernet0/0
 description xuchangshi 3661
 ip address 10.9.76.54 255.255.255.0
 speed 100
 full-duplex
 no keepalive
 no cdp enable
 h323-gateway voip interface
!
interface Serial1/0
 description CONNECT SHENGTING7206
 ip address 10.9.54.38 255.255.255.252
 ip access-group xcvirus in
 ip access-group xcvirus out
 no ip mroute-cache
 serial restart-delay 0
 no dce-terminal-timing-enable
 no fair-queue
 no cdp enable
!
interface Serial1/1
 no ip address
 shutdown
 serial restart-delay 0
 no dce-terminal-timing-enable
 no cdp enable
!
interface Serial1/2
 no ip address
 shutdown
 serial restart-delay 0
 no dce-terminal-timing-enable
 no cdp enable
!
interface Serial1/3
 no ip address
 shutdown
 serial restart-delay 0
 no dce-terminal-timing-enable
 no cdp enable
!
router ospf 100
 log-adjacency-changes
 redistribute connected subnets
 redistribute static subnets
 network 10.9.76.0 0.0.0.255 area 11
 network 10.9.54.36 0.0.0.3 area 0
!
no ip http server
no ip http secure-server
ip classless
ip route 0.0.0.0 0.0.0.0 10.9.54.37
ip route 10.9.77.0 255.255.255.0 10.9.76.9
ip route 10.9.80.0 255.255.255.0 10.9.76.201
ip route 10.9.85.0 255.255.255.0 10.9.76.202
!
!
!
!
ip access-list extended xcvirus
 deny   tcp any any eq 135
 deny   tcp any any eq 136
 deny   tcp any any eq 137
 deny   tcp any any eq 138
 deny   tcp any any eq 389
 deny   tcp any any eq 445
 deny   tcp any any eq 4444
 deny   udp any any eq tftp
 deny   udp any any eq 135
 deny   udp any any eq 136
 deny   udp any any eq snmp
 deny   udp any any eq 389
 deny   udp any any eq 445
 deny   udp any any eq 1434
 deny   udp any any eq 1433
 deny   tcp any any eq 139
 deny   tcp any any eq 1087
 deny   udp any any eq 1087
 permit ip any any
snmp-server engineID local 000000090200000943D31D10
snmp-server community public RO
snmp-server community hacz RW
snmp-server packetsize 2048
snmp-server enable traps xgcp
snmp-server enable traps isdn call-information
snmp-server enable traps isdn layer2
snmp-server enable traps hsrp
snmp-server enable traps config
snmp-server enable traps entity
snmp-server enable traps envmon
snmp-server enable traps bgp
snmp-server enable traps rsvp
snmp-server enable traps frame-relay
snmp-server enable traps frame-relay subif
snmp-server enable traps syslog
snmp-server enable traps rtr
snmp-server enable traps dlsw
snmp-server enable traps dial
snmp-server enable traps dsp card-status
snmp-server enable traps voice poor-qov
snmp-server host 10.8.4.69 public  voice snmp
no cdp run
!
!
!
!
control-plane
!
!
!
!
!
!
!
dial-peer voice 300 voip
 destination-pattern 00....
 session target ipv4:10.9.54.74
!
dial-peer voice 100378 voip
 destination-pattern 78....
 session target ipv4:10.9.54.6
!
dial-peer voice 98 voip
 destination-pattern 98....
 session target ipv4:10.9.54.46
!
dial-peer voice 100392 voip
 destination-pattern 92....
 session target ipv4:10.9.54.34
!
dial-peer voice 71 voip
 destination-pattern 71....
 session target ipv4:10.9.46.181
!
。。。。。。。。

 

!
gateway
 timer receive-rtp 1200
 emulate cisco h323 bandwidth
!
sip-ua
!
!
!
line con 0
 exec-timeout 0 0
 password 7 104D08101F1F17050B0E3F727D71
 login
line aux 0
 session-timeout 10
 password 7 0110070D4103030126465B50405C
 login
line vty 0 4
 session-timeout 10
 exec-timeout 5 0
 password 7 0110070D4103030126465B50405C
 login
line vty 5 32
 password 7 121A041E0803090A2D2131716A6C
 login
!
!
end

 

本路由器放置在，惠普核心交换机上层，中间有个防火墙，透明模式，与IDS联动