!
#system config
language English
hostname EdgeGateway
ip domain-name edgegateway.com.cn
clock timezone CST6CDT,M3.2.0/2,M11.1.0/2
service password-encryption
!
#log config
log persistent severity 7
!
#user config
username admin privilege 15 password $1$4uCjyOgw$HNQuju4dv/YWzZ/S7hgbj0
!
enable password $1$kvwao0Sc$zzKGmDaqupdkXYaaObwJx/
!
#aaa config
!
#cron config
chronos reboot every day 3 5
remote-login retry 20
!
#alarm config
!
#loopback config
interface loopback 1
  ip address 127.0.0.1 255.0.0.0
!
!
#ethernet interface config
interface fastethernet 0/1
  track l2-state
  ip address dhcp
!
interface fastethernet 0/2
!
!
#Ethernet sub interface config
!
#cellular config
cellular 1 gsm profile 1 11166.mcs use-blank-dialno auto  
cellular 1 gsm profile 2 ne01.vzwstatic use-blank-dialno auto  
cellular 1 gsm profile 3 10569.mcs use-blank-dialno auto  
cellular 1 dial interval 10
cellular 1 signal interval 120
cellular 1 network auto
cellular 1 dual-sim enable
cellular 1 dual-sim main 1
cellular 1 dual-sim policy redial 5
cellular 1 sms mode text
cellular 1 sms interval 30
!
interface cellular 1
  dialer profile 1
  dialer profile 2 secondary
  dialer timeout 120
  dialer activate auto
  ip address negotiated
  ip mru 1500
  ip mtu 1500
  ppp ipcp dns request
  ppp keepalive 55 5
!
!
#dot11 config
interface dot11radio 1
  ip address dhcp
  station-role workgroup-bridge
  radio-type dot11bgn
  client-mode ssid Henry@s#Pump
  client-mode authentication-method wpa 2
  client-mode cipher-suite ccmp key ascii $AES$861CE7AACCECC4CAF7EFD9A308A655E3
  no client-mode default-route
!
!
#bridge config
!
bridge 1
!
interface bridge 1
  ip address 192.168.1.1 255.255.255.0
!
interface fastethernet 0/2
  bridge-group 1
!
!
!
#dialer config
!
#ipsec config
crypto ipsec-daemon stop
!
#l2tp config
!
#openvpn config
!
#openvpn server config
!
#web config
ip web-access timeout 300
ip https access enable
!
#device-manager config
device-manager enable
device-manager server iot.inhandnetworks.com
device-manager account nmelone@henry-pump.com
device-manager location cellular
!
#InConnect config
!
#Erlang config
erlang mode off
!
#telnet server config
no ip telnet server
no ip telnet access enable
!
#ssh server config
!
#dhcp-relay config
!
#dns-relay config
ip dns-relay server
!
#dhcp server config
interface bridge 1
  ip dhcp-server enable
  ip dhcp-server range 192.168.1.2 192.168.1.254
  ip dhcp-server lease 1440
!
!
#dns config
!
#ip host config
!
#ddns config
!
#snmp config

#ovdp config
!
!

#dockerd config
!

#portainer config
!

#Azure IoT Edge config
!

#AWS IoT Greengrass config
!
#ntp server config
  ntp master 2
  ntp server 0.pool.ntp.org
  ntp server 1.pool.ntp.org
  ntp server 2.pool.ntp.org
  ntp server 3.pool.ntp.org
!
!

#Telegraf config
!
#email config
!
#sntp client config
sntp-client
sntp-client server 0.pool.ntp.org port 123
sntp-client server 1.pool.ntp.org port 123
sntp-client server 2.pool.ntp.org port 123
sntp-client server 3.pool.ntp.org port 123
!
#gre config
!
#static route config
ip route 0.0.0.0 0.0.0.0 cellular 1 253
ip route 0.0.0.0 0.0.0.0 dot11radio 1 250
ip route 0.0.0.0 0.0.0.0 fastethernet 0/1 255
!
#rip config
!
!
#ospf config
!
!
#filtering config
!
#bgp config
!
!
#firewall config
!
!
interface cellular 1
  ip access-group 192 admin
!
access-list 100 10 permit ip any any 
access-list 101 10 permit ip any any 
access-list 102 10 permit ip any any 
access-list 192 10 permit tcp any any eq 443 log
access-list 192 20 deny tcp any any eq 80 
access-list 192 30 deny tcp any any eq 23 
access-list 192 40 deny tcp any any eq 22 
access-list 192 50 deny tcp any any eq 53 
access-list 192 60 deny udp any any eq 53 
interface cellular 1
  ip nat outside
!
interface bridge 1
  ip nat inside
!
interface fastethernet 0/1
  ip nat outside
!
interface dot11radio 1
  ip nat outside
!
!
ip snat inside list 101 interface fastethernet 0/1 
ip snat inside list 100 interface cellular 1 
ip snat inside list 102 interface dot11radio 1 
ip dnat outside static tcp interface cellular 1 44818 192.168.1.10 44818 description PLC 
ip dnat outside static tcp interface cellular 1 5900 192.168.1.11 5900 description VNC 
!
!
!
!
!
#tcp mss config
ip tcp adjust-mss 1360
!
!
!
#netwatcher config
!
!
#sla config
!
#track config
!
#vrrpd config
!
#backup config
!
#mroute config
!
#cert config
!
!
#cert enroll config
crypto key generate rsa general-keys modulus 1024
!
!
#dls config
!
#gps config
  gps enable
!
#gps serial config
!
#gps server config
!
#gps client config
!
#Serial Configuration
serial 1
!
serial 2
!
!
#python config
python enable
python log username adm password $AES$BFA541FA10FA3B041CBA4412D12C52B8
python app 1 on
python appcmd 1 logsize 1

quit
!
python app 2 on
python appcmd 2 logsize 1 2
device_supervisor 
quit
!
!
#Modbus IO Configuration
!
#traffic-stated config
interface cellular 1
    traffic-stated statistic
!
!
#data-usage config
data-usage sim1
  daily units MB
  daily limit 35
  monthly units GB
  monthly limit 1
!
interface cellular 1
    traffic-stated sim 1 data-usage sim1
    traffic-stated sim 1 daily-action only-report
    traffic-stated sim 1 monthly-action only-report
    traffic-stated sim 1 monitoring
!
#end of configuration