! hostname ${HOSTNAME} ! ip domain name ${DOMAIN_NAME} ip domain lookup ! crypto key generate rsa modulus 2048 ip ssh version 2 ! vrf definition Mgmt-intf ! address-family ipv4 exit-address-family ! address-family ipv6 exit-address-family ! vrf definition mgmt-net-intf ! address-family ipv4 exit-address-family ! address-family ipv6 exit-address-family ! no aaa new-model ! username ${SSH_USERNAME} privilege 15 password 0 ${SSH_PASSWORD} enable password 0 ${ENABLE_PASSWORD} ! interface GigabitEthernet1 vrf forwarding Mgmt-intf ip address ${NICID_0_IP_ADDRESS} ${NICID_0_NETMASK} no shutdown ! interface GigabitEthernet2 ip address ${SERVICE_IP_ADDRESS} ${SERVICE_NETMASK} no shutdown ! interface GigabitEthernet3 vrf forwarding mgmt-net-intf ip address ${MGMT_IP_ADDRESS} ${MGMT_NETMASK} no shutdown ! interface GigabitEthernet4 ip address ${LAN_IP_ADDRESS} ${LAN_NETMASK} no shutdown ! ip route 0.0.0.0 0.0.0.0 ${SERVICE_GATEWAY} ! ip route vrf mgmt-net-intf 0.0.0.0 0.0.0.0 ${MGMT_GATEWAY} ! ip route vrf Mgmt-intf 0.0.0.0 0.0.0.0 ${NICID_0_GATEWAY} ! line vty 0 4 login local transport input all ! end