! R-ISP-01 end state after svpn-dmvpn-implementation (Implement DMVPN: mGRE, NHRP & IPsec Protection).
! Captured with `show running-config | exclude ^!|^ *$` on IOSv 15.9(3)M12 in CML at 10.82.22.170,
! 2026-09-26, lab seclab-svpn-dmvpn-flexvpn (labs/SVPN/blueprint.yaml, svpn-extension-v1).
! The three IOSv licence banners are omitted; nothing else is edited. Secrets are type 9 hashes of the
! lab-only password; the IKEv2 pre-shared key is the lab key the lesson prints.
! This is the state svpn-flexvpn-local-aaa starts from.
version 15.9
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname R-ISP-01
boot-start-marker
boot-end-marker
enable secret 9 $9$rsDE9yQ0aJti/d$GQ6OjmwMtUHGFv58ZSqqaJ20DDWkmMvFadda.Dx.5uE
no aaa new-model
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no ip domain lookup
ip domain name securitylessons.lab
ip cef
no ipv6 cef
multilink bundle-name authenticated
username admin privilege 15 secret 9 $9$PTk3XcfoqyXeqd$/Pj6wMm/hWXxlGPddoqTybUOTiBFqNbEqSX8lPPgTv2
redundancy
interface GigabitEthernet0/0
 description perimeter transit
 ip address 198.51.100.254 255.255.255.0
 duplex auto
 speed auto
 media-type rj45
interface GigabitEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
 media-type rj45
interface GigabitEthernet0/2
 description branch-wan to R-BRANCH-01
 ip address 192.0.2.1 255.255.255.252
 duplex auto
 speed auto
 media-type rj45
interface GigabitEthernet0/3
 description branch2-wan to R-BRANCH-02
 ip address 192.0.2.5 255.255.255.252
 duplex auto
 speed auto
 media-type rj45
ip forward-protocol nd
no ip http server
no ip http secure-server
ipv6 ioam timestamp
control-plane
line con 0
 exec-timeout 0 0
 logging synchronous
line aux 0
line vty 0 4
 login
 transport input none
no scheduler allocate
end