3G路由配置改动的为红色2014.8.22.doc

# version 5.20, Release 2318# sysname RT-YAYC-wangdian （1）（网点名称）# domain default enable system # telnet server enable # ip ttl-expires enable ip unreachables enable# dar p2p signature-file flash:/p2p_default.mtd# port-security enable # password-recovery enable#acl number 3000 description IPSec_Secure （2）（和网点网关前3位一样） rule 0 permit ip source 8.99.40.0 0.0.0.255 destination 8.0.0.0 1.255.255.255 rule 5 permit ip source 9.99.40.0 0.0.0.255 destination 8.0.0.0 1.255.255.255 acl number 3100 rule 0 permit ip source 8.99.40.0 0.0.0.255 rule 5 permit ip source 9.99.40.0 0.0.0.255 #vlan 1#domain system access-limit disable state active idle-cut disable self-service-url disable #ike proposal 9 encryption-algorithm 3des-cbc dh group2 authentication-algorithm md5#ike peer 3g proposal 9 pre-shared-key xinhe3g remote-address 8.209.163.200#ipsec transform-set 9 encapsulation-mode tunnel transform esp esp authentication-algorithm md5 esp encryption-algorithm 3des#ipsec policy unicom 1 isakmp security acl 3000 pfs dh-group2 ike-peer 3g transform-set 9#user-group system group-attribute allow-guest#local-user admin password cipher admin authorization-attribute level 3 service-type telnet service-type weblocal-user view password cipher wangdian authorization-attribute level 3 service-type telnet terminal service-type web#cwmp undo cwmp enable#controller E1 0/0 using e1#interface Aux0 async mode flow link-protocol ppp#interface Cellular0/0 async mode protocol link-protocol ppp#interface Cellular1/0 async mode protocol link-protocol ppp ppp pap local-user yaycliuljcyancxy.ydoa.snapn password cipher yanchang (3) (市办分配的用户名和密码)ppp ipcp dns admit-any ppp ipcp dns request ppp lcp sn accept ppp user attach-format imsi-sn split $ ip address ppp-negotiate tcp mss 1400 undo rip output dialer enable-circular dialer-group 4 dialer timer idle 30000 dialer timer autodial 3 dialer number *99# autodial ipsec policy unicom#interface Ethernet0/0 port link-mode route ip address 8.99.40.1 255.255.255.0 （4）（网点网关地址） ip address 9.99.40.1 255.255.255.0 sub rip v 2#interface Serial0/0:0 link-protocol ppp ip address 8.206.14.158 255.255.255.252 （5）（本地广域网地址） standby interface Cellular1/0 standby timer delay 1 1 rip v 2#interface NULL0#interface Vlan-interface1 ip address 192.168.1.1 255.255.255.0 #interface Ethernet0/1 port link-mode bridge#interface Ethernet0/2 port link-mode bridge#interface Ethernet0/3 port link-mode bridge#interface Ethernet0/4 port link-mode bridge#rip 1 undo summary version 2 network 8.0.0.0 network 9.0.0.0# ip route-static 0.0.0.0 0.0.0.0 Cellular1/0 preference 100 ip route-static 0.0.0.0 0.0.0.0 Serial0/0:0# dialer-rule 4 acl 3100# load xml-configuration # load tr069-configuration#user-inter