R2#sh run
Building configuration...

Current configuration : 3387 bytes
!
! Last configuration change at 17:05:35 Mountai Wed Jan 15 2003
! NVRAM config last updated at 10:01:50 Mountai Thu Jan 16 2003
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname R2
!
!
!
!
!
!
clock timezone Mountain 7
ip subnet-zero
ip tcp synwait-time 5
ip telnet source-interface Ethernet0
no ip domain-lookup
!
frame-relay de-list 1 protocol ip list 102
!
crypto isakmp policy 10
 authentication pre-share
crypto isakmp key cisco address 202.21.8.166
crypto isakmp key cisco address 202.21.8.170
crypto isakmp key ccie address 202.21.8.174
crypto isakmp key ccie address 202.21.8.146
crypto isakmp key ccie address 202.21.8.145
!
!
crypto ipsec transform-set cisco esp-des
crypto ipsec transform-set tun esp-des
 mode transport
!
crypto map acpc 10 ipsec-isakmp
 set peer 202.21.8.146
 set transform-set cisco
 match address 135
crypto map acpc 20 ipsec-isakmp
 set peer 202.21.8.147
 set transform-set cisco
 match address 135
crypto map R2R6a 10 ipsec-isakmp
 set peer 202.21.8.166
 set peer 202.21.8.170
 set transform-set cisco
 match address 101
!
!
!
!
interface Loopback0
 ip address 8.2.2.2 255.255.255.255
!
interface Loopback1
 ip address 172.16.1.1 255.255.255.128
!
interface Loopback2
 ip address 172.16.2.1 255.255.255.0
!
interface Loopback3
 ip address 172.16.3.1 255.255.255.0
!
interface Ethernet0
 ip address 161.8.136.2 255.255.255.128
 ip access-group Task65a in
 ip irdp
 ip irdp preference 100
 ntp broadcast
!
interface Serial0
 ip address 202.21.8.145 255.255.255.248
 ip access-group Task65a in
 encapsulation frame-relay
 frame-relay de-group 1 123
 frame-relay de-group 1 125
 frame-relay map ip 202.21.8.146 125 broadcast
 frame-relay map ip 202.21.8.147 123 broadcast
 no frame-relay inverse-arp
 frame-relay lmi-type cisco
 crypto map acpc
!
interface Serial1
 ip address 202.21.8.165 255.255.255.252
 ip access-group Task65a in
 crypto map R2R6a
 clockrate 64000
!
interface Serial2
 ip address 202.21.8.169 255.255.255.252
 ip access-group Task65a in
 crypto map R2R6a
 clockrate 64000
!
interface Serial3
 ip address 161.8.140.2 255.255.255.252
 ip access-group Task65a in
 clockrate 64000
!
interface BRI0
 no ip address
 shutdown
 isdn x25 static-tei 0
!
router bgp 8127
 no synchronization
 bgp router-id 8.2.2.2
 bgp cluster-id 2886730497
 bgp log-neighbor-changes
 network 172.16.1.0 mask 255.255.255.128
 network 172.16.2.0 mask 255.255.255.0
 network 172.16.3.0 mask 255.255.255.0
 aggregate-address 172.16.0.0 255.255.0.0 suppress-map No25
 neighbor ebgp peer-group
 neighbor ebgp timers 200 600
 neighbor 8.6.6.6 remote-as 86
 neighbor 8.6.6.6 peer-group ebgp
 neighbor 8.6.6.6 ebgp-multihop 2
 neighbor 8.6.6.6 update-source Loopback0
 neighbor 8.6.6.6 send-community
 neighbor 8.6.6.6 route-map DontSend out
 neighbor 161.8.136.7 remote-as 8127
 neighbor 161.8.136.7 timers 300 900
 neighbor 161.8.136.7 next-hop-self
 neighbor 161.8.140.1 remote-as 89
 neighbor 161.8.140.1 peer-group ebgp
 neighbor 202.21.8.146 remote-as 85
 neighbor 202.21.8.146 peer-group ebgp
 neighbor 202.21.8.147 remote-as 83
 neighbor 202.21.8.147 peer-group ebgp
 neighbor 202.21.8.147 route-map LocalPref in
!
ip classless
ip route 8.6.6.6 255.255.255.255 Serial1
ip route 8.6.6.6 255.255.255.255 Serial2
ip http server
ip as-path access-list 1 permit ^1$
!
!
ip access-list extended Task65a
 permit tcp any any eq telnet
 permit tcp any eq telnet any
 permit tcp any any eq www
 permit tcp any any eq bgp
 permit tcp any eq bgp any
 permit udp any any eq 80
 permit icmp any any echo
 permit icmp any any echo-reply
 permit esp any any
 permit ahp any any
 permit udp any any eq isakmp
access-list 1 permit 172.16.1.0 0.0.0.127
access-list 100 permit ip host 161.8.132.0 host 255.255.254.0
access-list 101 permit icmp 161.8.136.0 0.0.0.127 202.21.8.0 0.0.0.127 
access-list 101 permit icmp 202.21.8.0 0.0.0.127 161.8.136.0 0.0.0.127 
access-list 102 deny   tcp any any eq bgp
access-list 102 deny   tcp any eq bgp any
access-list 102 permit ip any any
access-list 135 permit tcp any eq bgp any
access-list 135 permit tcp any any eq bgp
route-map DontSend permit 10
 match as-path 1
 set community no-export
!
route-map DontSend permit 20
!
route-map No25 permit 10
 match ip address 1
!
route-map LocalPref permit 10
 match ip address 100
 set local-preference 500
!
route-map LocalPref permit 20
!
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line aux 0
line vty 0 4
 login
!
ntp master 2
end

R2#