R5#sh run
Building configuration...

Current configuration : 3267 bytes
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname R5
!
!
!
!
!
!
ip subnet-zero
ip tcp synwait-time 5
no ip domain-lookup
ip dhcp excluded-address 161.8.148.1 161.8.148.127
!
ip dhcp pool P8DHCP
   network 161.8.148.0 255.255.254.0
   default-router 161.8.132.4
   dns-server 54.254.1.254
   domain-name ccie.com
   lease 3
!
frame-relay de-list 1 protocol ip list 102
!
!
crypto isakmp policy 10
 authentication pre-share
crypto isakmp key ccie address 202.21.8.173
crypto isakmp key ccie address 202.21.8.147
crypto isakmp key ccie address 202.21.8.145
!
!
crypto ipsec transform-set cisco esp-des
crypto ipsec transform-set tun esp-des
 mode transport
!
crypto map acpc 10 ipsec-isakmp
 set peer 202.21.8.145
 set transform-set cisco
 match address 135
crypto map acpc 20 ipsec-isakmp
 set peer 202.21.8.147
 set transform-set cisco
 match address 135

!
!
crypto map tunnel 10 ipsec-isakmp
 set peer 202.21.8.173
 set transform-set tun
 match address 104
!
!
!
!
interface Loopback0
 description ReplacesTokenRing0
 ip address 161.8.128.5 255.255.252.0
!
interface Tunnel0
 ip address 202.21.8.174 255.255.255.252
 tunnel source Loopback0
 tunnel destination 202.21.8.129
 crypto map tunnel
!
interface Ethernet0
 ip address 161.8.132.5 255.255.254.0
 ip access-group 101 in
 no ip redirects
 standby 16 ip 161.8.132.10
 standby 16 priority 100
 standby 16 authentication ccie
!
interface Serial0
 ip address 202.21.8.146 255.255.255.248
 encapsulation frame-relay
 no fair-queue
 frame-relay de-group 1 152
 frame-relay de-group 1 153
 frame-relay map ip 202.21.8.145 152 broadcast
 frame-relay map ip 202.21.8.147 153 broadcast
 no frame-relay inverse-arp
 crypto map acpc
!
interface Serial1
 no ip address
 shutdown
!
interface TokenRing0
 no ip address
 shutdown
 ring-speed 16
!
router bgp 85
 bgp router-id 8.5.5.5
 bgp cluster-id 3390376082
 bgp log-neighbor-changes
 network 161.8.128.0 mask 255.255.252.0
 network 161.8.132.0 mask 255.255.254.0
 network 202.21.8.144 mask 255.255.255.248
 neighbor 161.8.132.4 remote-as 84
 neighbor 161.8.132.4 prefix-list NO30 in
 neighbor 202.21.8.145 remote-as 8127
 neighbor 202.21.8.145 timers 200 600
 neighbor 202.21.8.145 prefix-list NO30 in
 neighbor 202.21.8.147 remote-as 83
 neighbor 202.21.8.147 prefix-list NO30 in
!
ip classless
ip http server
!
!
ip prefix-list NO30 seq 5 permit 0.0.0.0/0 le 29
access-list 1 deny   10.3.1.1
access-list 1 deny   10.3.2.1
access-list 1 deny   10.3.3.1
access-list 1 deny   202.21.8.147
access-list 1 deny   202.21.8.129
access-list 1 deny   202.21.8.162
access-list 1 permit any
access-list 101 permit udp host 161.8.132.4 any eq 1985
access-list 101 deny   udp any any eq 1985
access-list 101 permit ip any any
access-list 102 deny   tcp any any eq bgp
access-list 102 deny   tcp any eq bgp any
access-list 102 permit ip any any
access-list 103 permit icmp 161.8.128.0 0.0.3.255 202.21.8.128 0.0.0.127
access-list 104 permit icmp any any
access-list 135 permit tcp any eq bgp any
access-list 135 permit tcp any any eq bgp
route-map ICMPR5toR3 permit 10
 match ip address 103
 set interface Tunnel0
!
!
!
line con 0
 access-class 1 out
 exec-timeout 0 0
 privilege level 15
 logging synchronous
line aux 0
 access-class 1 out
line vty 0 4
 access-class 1 out
 login
!
end

R5#