voice service voip

no ip address trusted authenticate

dtmf-interworking rtp-nte

mode border-element license capacity 10

allow-connections h323 to h323

allow-connections h323 to sip

allow-connections sip to h323

allow-connections sip to sip

fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback pass-through g711alaw

sip

min-se 300

registrar server expires max 600 min 60

no update-callerid

early-offer forced

voice class codec 1

codec preference 1 g711alaw

codec preference 2 g711ulaw

codec preference 3 g729r8

voice class h323 10

h225 timeout tcp establish 3

voice register global

mode cme

source-address 10.70.3.5 port 5060

timeouts interdigit 5

max-dn 100

max-pool 50

load 7821 sip78xx.12-6-1-0101-692

load 7832 sip7832.12-5-1SR3-74

load 7841 sip78xx.12-6-1-0101-692

timezone 34

date-format D/M/Y

tftp-path flash:

create profile sync 0538045722422827

auto-register

voice register dn 1

number 5900

name ACE Reception

voice register pool 1

busy-trigger-per-button 2

id mac 701F.5385.1845

type 7841

number 1 dn 1

cor incoming GSM default

dtmf-relay rtp-nte sip-kpml

interface Loopback1
ip address 10.70.1.254 255.255.255.255

interface GigabitEthernet0/0/0

no ip address

negotiation auto

interface GigabitEthernet0/0/0.2

description VLAN2::MGT

encapsulation dot1Q 2

ip vrf receive ISP1

ip address 10.70.2.254 255.255.255.0

ip nat inside

ip policy route-map PBR-VRF-Selection

interface GigabitEthernet0/0/0.3

description VLAN3::Voice

encapsulation dot1Q 3

ip address 10.70.3.5 255.255.255.0

ip nat inside

h323-gateway voip interface

h323-gateway voip id MyGateway ipaddr 10.70.3.5 1719

h323-gateway voip h323-id MyGateway

h323-gateway voip tech-prefix 1#

h323-gateway voip bind srcaddr 10.70.3.5

interface GigabitEthernet0/0/0.201

description ISP1 Public IPs

encapsulation dot1Q 201

ip vrf forwarding ISP1

ip address 172.16.201.1 255.255.255.0

ip nat inside

interface GigabitEthernet0/0/0.202

description ISP2 Public IPs

encapsulation dot1Q 202

ip vrf forwarding ISP2

ip address 172.16.202.1 255.255.255.0

ip nat inside

interface GigabitEthernet0/0/0.212

description Internet link to ISP2

encapsulation dot1Q 212

ip vrf forwarding ISP2

ip address dhcp

ip nat outside

interface GigabitEthernet0/0/0.300

description Internet link to SIP_Trunk

encapsulation dot1Q 300

ip address 10.240.51.234 255.255.255.248

ip nat outside

interface GigabitEthernet0/0/1

description Internet link to ISP1

no ip address

negotiation auto

pppoe enable group global

pppoe-client dial-pool-number 1

interface GigabitEthernet0

vrf forwarding Mgmt-intf

no ip address

shutdown

negotiation auto

interface Dialer1

ip vrf forwarding ISP1

ip address negotiated

ip nat outside

encapsulation ppp

ip tcp adjust-mss 1452

dialer pool 1

dialer idle-timeout 0

dialer persistent

dialer-group 1

no cdp enable

ppp authentication chap callin

ppp chap hostname ACE.1@bait.ooredoo.om

ppp chap password 7 014252540F5E535673

interface Dialer2

ip vrf forwarding ISP2

ip address negotiated

ip nat outside

encapsulation ppp

ip tcp adjust-mss 1452

dialer pool 2

dialer idle-timeout 0

dialer persistent

dialer-group 2

no cdp enable

ppp authentication chap callin

ppp chap hostname ACE

ppp chap password 7 106F2A3C2546405858

router eigrp 10

network 10.0.0.0

offset-list ROUTE-TO-BKP in 512000 Tunnel0

passive-interface default

no passive-interface Tunnel0

no passive-interface Tunnel1

eigrp stub connected summary redistributed

router ospf 100

router-id 10.70.1.254

passive-interface default

no passive-interface GigabitEthernet0/0/0.2

network 10.70.2.0 0.0.0.255 area 0

distance 70

ip forward-protocol nd

ip http server

ip http authentication local

ip http secure-server
ip tftp source-interface GigabitEthernet0/0/0.3

ip nat inside source static udp 172.16.201.2 10002 interface Dialer1 10002

ip nat inside source static udp 172.16.201.2 11002 interface Dialer1 11002

ip nat inside source static udp 172.16.202.2 11002 interface GigabitEthernet0/0/0.212 11002

ip nat inside source static udp 172.16.202.2 10002 interface GigabitEthernet0/0/0.212 10002

ip nat inside source list SIP-NAT interface GigabitEthernet0/0/0.300 overload

ip nat inside source list ISP1-NAT interface Dialer1 vrf ISP1 overload

ip nat inside source list ISP2-NAT interface GigabitEthernet0/0/0.212 vrf ISP2 overload

ip route 0.0.0.0 0.0.0.0 10.255.255.1

ip route 10.70.0.0 255.255.0.0 10.70.2.1

ip route 10.215.110.139 255.255.255.255 10.240.51.233

ip route 10.215.119.75 255.255.255.255 10.240.51.233

ip route vrf ISP1 0.0.0.0 0.0.0.0 Dialer1

ip route vrf ISP2 0.0.0.0 0.0.0.0 192.168.100.1

ip ssh version 2

ip radius source-interface GigabitEthernet0/0/0.2

ip access-list standard ISP1-NAT

permit 10.70.2.49

permit 172.16.201.0 0.0.0.255

permit 172.16.200.0 0.0.0.255

permit 10.70.2.0 0.0.0.31

ip access-list standard ISP2-NAT

permit 10.70.2.49

permit 172.16.202.0 0.0.0.255

permit 172.16.200.0 0.0.0.255

permit 10.70.2.0 0.0.0.31

ip access-list standard ROUTE-TO-BKP

deny any

ip access-list standard snmp-access

permit 10.0.0.0 0.255.255.255

deny any

ip access-list standard vty-access

permit 10.0.0.0 0.255.255.255

permit 87.101.230.32 0.0.0.3

permit 87.101.230.196 0.0.0.3

permit 87.101.233.144 0.0.0.7

permit 178.20.146.240 0.0.0.15

permit 212.12.186.240 0.0.0.3

permit 87.101.220.140 0.0.0.3

permit 81.22.17.24 0.0.0.7

permit 37.131.74.192 0.0.0.15

deny any

ip access-list extended SIP-NAT

permit ip 10.70.0.0 0.0.255.255 host 10.215.110.139

permit ip 10.70.0.0 0.0.255.255 host 10.215.119.175

ip access-list extended To_Public

deny ip 10.70.2.0 0.0.0.31 10.0.0.0 0.255.255.255

deny ip 10.70.2.0 0.0.0.31 192.168.0.0 0.0.255.255

deny ip 10.70.2.0 0.0.0.31 172.16.0.0 0.15.255.255

deny ip 10.0.0.0 0.255.255.255 10.70.2.0 0.0.0.31

deny ip 192.168.0.0 0.0.255.255 10.70.2.0 0.0.0.31

deny ip 172.16.0.0 0.15.255.255 10.70.2.0 0.0.0.31

deny ip host 10.70.2.49 10.0.0.0 0.255.255.255

deny ip 10.0.0.0 0.255.255.255 host 10.70.2.49

permit ip host 10.70.2.49 any

permit ip any host 10.70.2.49

permit ip 10.70.2.0 0.0.0.31 any

permit ip any 10.70.2.0 0.0.0.31

deny ip any any

route-map PBR-VRF-Selection permit 10

match ip address To_Public

set vrf ISP1

snmp-server community ACE-public RO snmp-access

snmp ifmib ifindex persist

tftp-server bootflash:kern7832.12-5-1SR3-74.sbn

tftp-server bootflash:prelo7832.BR-01-06.sbn

tftp-server bootflash:rootfs7832.12-5-1SR3-74.sbn

tftp-server bootflash:sboot7832.BR-01-10.sbn

tftp-server bootflash:sip7832.12-5-1SR3-74.loads

tftp-server bootflash:sboot78xx.12-6-1-0101-692.sbn

tftp-server bootflash:rootfs78xx.12-6-1-0101-692.sbn

tftp-server bootflash:rootfs2.78xx.12-6-1-0101-692.sbn

tftp-server bootflash:sboot2.78xx.12-6-1-0101-692.sbn

tftp-server bootflash:kern2.78xx.12-6-1-0101-692.sbn

tftp-server bootflash:sip78xx.12-6-1-0101-692.loads

radius server Radius1

address ipv4 10.1.4.11 auth-port 1645 acct-port 1646

key 7 1316161B0803

control-plane

mgcp behavior rsip-range tgcp-only

mgcp behavior comedia-role none

mgcp behavior comedia-check-media-src disable

mgcp behavior comedia-sdp-force disable

mgcp profile default

dial-peer cor custom

name GSM

name LANDLINE

name LOCAL

name INTERNATIONAL

dial-peer cor list GSM

member GSM

member LANDLINE

member LOCAL

dial-peer cor list INT

member GSM

member LANDLINE

member LOCAL

member INTERNATIONAL

dial-peer cor list LANDLINE

member LANDLINE

member LOCAL

dial-peer cor list LOCAL

member LOCAL

dial-peer cor list gsm

member GSM

dial-peer cor list int

member INTERNATIONAL

dial-peer cor list landline

member LANDLINE

dial-peer cor list local

member LOCAL

dial-peer voice 7 voip

description ##DIAL_PEER_RIYAD##

destination-pattern ^[3]..$

session target ipv4:10.1.3.5

incoming called-number ^[3]..$

voice-class codec 1

dial-peer voice 8 voip

description ##DIAL_PEER_RIYAD##

destination-pattern ^[56]...$

session target ipv4:10.1.3.5

incoming called-number ^[56]...$

voice-class codec 1

dial-peer voice 9 voip

description ##DIAL_PEER_BAHRAIN##

destination-pattern ^[23]...$

session target ipv4:10.68.4.62

incoming called-number ^[23]...$

voice-class codec 1

dial-peer voice 10 voip

description ##DIAL_PEER_DUBAI##

destination-pattern ^[14]...$

session target ipv4:10.80.3.5

incoming called-number ^[14]...$

voice-class codec 1

dial-peer voice 1 voip

description ***ALL INCOMING***

translation-profile incoming in

no modem passthrough

session protocol sipv2

incoming called-number .

voice-class codec 1

voice-class sip early-offer forced

dtmf-relay rtp-nte sip-notify

no vad

dial-peer voice 2 voip

corlist outgoing gsm

description ##DIAL_PEER_GSM##

translation-profile outgoing out

preference 10

destination-pattern 9[79].......

rtp payload-type nse 104

no modem passthrough

session protocol sipv2

session target ipv4:10.215.110.139

voice-class codec 1

voice-class sip early-offer forced

dtmf-relay rtp-nte sip-notify

fax-relay sg3-to-g3

fax rate 14400 bytes 48

fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback pass-through g711alaw

no vad

dial-peer voice 3 voip

corlist outgoing landline

description ##DIAL_PEER_LANDLINE ##

translation-profile outgoing out

preference 10
destination-pattern 92.......

rtp payload-type nse 104

no modem passthrough

session protocol sipv2

session target ipv4:10.215.110.139

session transport udp

voice-class codec 1

voice-class sip early-offer forced

dtmf-relay rtp-nte sip-notify

fax-relay sg3-to-g3

fax rate 14400

fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback pass-through g711alaw

no vad

dial-peer voice 4 voip

corlist outgoing int

description ##DIAL_PEER_INTERNATIONAL##

translation-profile outgoing out

preference 10

destination-pattern 900T

rtp payload-type nse 104

no modem passthrough

session protocol sipv2

session target ipv4:10.215.110.139

session transport udp

voice-class codec 1

voice-class sip early-offer forced

dtmf-relay rtp-nte sip-notify

fax-relay sg3-to-g3
fax rate 14400

fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback pass-through g711alaw

no vad

dial-peer voice 5 voip

corlist outgoing local

description ##DIAL_PEER_OMANTEL_CUSTOMER_CARE##

translation-profile outgoing out

preference 10

destination-pattern 91...

rtp payload-type nse 104

no modem passthrough

session protocol sipv2

session target ipv4:10.215.110.139

session transport udp

voice-class codec 1

voice-class sip early-offer forced

dtmf-relay rtp-nte sip-notify

fax-relay sg3-to-g3

fax rate 14400

fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback pass-through g711alaw

no vad

dial-peer voice 6 voip

corlist outgoing LANDLINE

description ##DIAL_PEER_TOLL_FREE##

translation-profile outgoing out

preference 10

destination-pattern 98.......
rtp payload-type nse 104

no modem passthrough

session protocol sipv2

session target ipv4:10.215.110.139

session transport udp

voice-class codec 1

voice-class sip early-offer forced

dtmf-relay rtp-nte sip-notify

fax-relay sg3-to-g3

fax rate 14400

fax protocol t38 version 0 ls-redundancy 0 hs-redundancy 0 fallback pass-through g711alaw

no vad

sip-ua

retry notify 6

timers notify 100

sip-server ipv4:10.240.51.234:5060

connection-reuse