R3#sh run
Building configuration...

Current configuration : 4294 bytes
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname R3
!
!
username cisco password 0 ccie
!
!
!
!
ip subnet-zero
ip tcp synwait-time 5
ip tcp intercept list 103
ip tcp intercept watch-timeout 15
no ip domain-lookup
!
frame-relay de-list 1 protocol ip list 102
!
!
crypto isakmp policy 10
 authentication pre-share
crypto isakmp key cisco address 202.21.8.161
crypto isakmp key ccie address 202.21.8.174
crypto isakmp key ccie address 202.21.8.146
crypto isakmp key ccie address 202.21.8.145
!
!
crypto ipsec transform-set cisco esp-des
crypto ipsec transform-set tun esp-des
 mode transport
crypto ipsec transform-set R3R4 ah-md5-hmac
!
crypto map acpc 10 ipsec-isakmp
 set peer 202.21.8.145
 set transform-set cisco
 match address 135
crypto map acpc 20 ipsec-isakmp
 set peer 202.21.8.146
 set transform-set cisco
 match address 135
!
crypto map tunnel 10 ipsec-isakmp
 set peer 202.21.8.174
 set transform-set tun
 match address 105
!
crypto map R3R4 10 ipsec-isakmp
 set peer 202.21.8.161
 set transform-set R3R4
 match address 106
!
!
!
!
interface Loopback0
 ip address 10.3.1.1 255.255.255.0
!
interface Loopback1
 ip address 10.3.2.1 255.255.255.0
!
interface Loopback2
 ip address 10.3.3.1 255.255.255.0
!
interface Tunnel0
 ip address 202.21.8.173 255.255.255.252
 tunnel source TokenRing0
 tunnel destination 161.8.128.5
 crypto map tunnel
!
interface Ethernet0
 no ip address
 shutdown
!
interface Serial0
 ip address 202.21.8.147 255.255.255.248
 ip access-group 101 in
 encapsulation frame-relay
 no fair-queue
 frame-relay de-group 1 132
 frame-relay de-group 1 135
 frame-relay map ip 202.21.8.145 132 broadcast
 frame-relay map ip 202.21.8.146 135 broadcast
 no frame-relay inverse-arp
 crypto map acpc
!
interface Serial1
 ip address 202.21.8.162 255.255.255.252
 ip access-group 101 in
 crypto map R3R4
!
interface TokenRing0
 ip address 202.21.8.129 255.255.255.240
 ip policy route-map ICMPR3toR5
 ring-speed 16
!
router bgp 83
 bgp router-id 8.3.3.3
 bgp cluster-id 167969537
 bgp log-neighbor-changes
 bgp bestpath as-path ignore
 network 10.3.1.0 mask 255.255.255.0
 network 10.3.2.0 mask 255.255.255.0
 network 10.3.3.0 mask 255.255.255.0
 network 202.21.8.128 mask 255.255.255.240
 aggregate-address 10.0.0.0 255.0.0.0
 neighbor 202.21.8.145 remote-as 8127
 neighbor 202.21.8.145 timers 200 600
 neighbor 202.21.8.145 send-community
 neighbor 202.21.8.145 route-map Subnets out
 neighbor 202.21.8.146 remote-as 85
 neighbor 202.21.8.146 send-community
 neighbor 202.21.8.146 route-map To_E45 in
 neighbor 202.21.8.146 route-map Subnets out
 neighbor 202.21.8.161 remote-as 84
 neighbor 202.21.8.161 send-community
 neighbor 202.21.8.161 route-map Subnets out
!
ip classless
ip http server
ip http access-class 2
ip http authentication local
!
access-list 1 permit 10.3.1.0
access-list 1 permit 10.3.3.0
access-list 1 permit 10.3.2.0
access-list 2 permit 161.8.132.0 0.0.1.255
access-list 100 permit ip host 161.8.132.0 host 255.255.254.0
access-list 101 permit tcp any any eq telnet
access-list 101 permit tcp any eq telnet any
access-list 101 permit tcp any any eq www
access-list 101 permit tcp any any eq bgp
access-list 101 permit tcp any eq bgp any
access-list 101 permit tcp any eq www any 
access-list 101 permit icmp any any echo
access-list 101 permit icmp any any echo-reply
access-list 101 permit ahp any any
access-list 101 permit esp any any
access-list 101 permit gre any any
access-list 101 permit udp any any eq isakmp
access-list 102 deny   tcp any any eq bgp
access-list 102 deny   tcp any eq bgp any
access-list 102 permit ip any any
access-list 103 permit tcp any 202.21.8.128 0.0.0.15
access-list 104 permit icmp 202.21.8.128 0.0.0.127 161.8.128.0 0.0.3.255
access-list 105 permit icmp any any
access-list 106 permit tcp any eq bgp any
access-list 106 permit tcp any any eq bgp
access-list 135 permit tcp any eq bgp any
access-list 135 permit tcp any any eq bgp
route-map ICMPR3toR5 permit 10
 match ip address 104
 set interface Tunnel0
!
route-map To_E45 permit 10
 match ip address 100
 set weight 500
!
route-map To_E45 permit 20
!
route-map Subnets permit 10
 match ip address 1
 set community no-advertise
!
route-map Subnets permit 20
!
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line aux 0
line vty 0 4
!
end

R3#