! PermitANY — Cisco IOS Base / Day-0 Config
! Complete day-zero configuration for Cisco IOS/IOS-XE routers and switches. Includes hostname, domain, users, NTP, DNS, logging, SSH, SNMP, and login banner.
! Generated: 2026-09-20
! These are EXAMPLE values. Replace with your actual config before deploying.
!
!
! Generated by PermitANY — Cisco IOS Base / Day-0 Config
! Device: RTR-CORE-01
!
version 15.2
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
service password-encryption
no service config
!
hostname RTR-CORE-01
!
ip domain-name corp.example.com
!
enable secret Str0ng$ecret!
!

username admin privilege 15 secret P@ssw0rd!

!
! SSH Configuration
crypto key generate rsa modulus 2048
ip ssh version 2
ip ssh authentication-retries 3
ip ssh time-out 60
!
line vty 0 15
 login local
 transport input ssh
 exec-timeout 10 0
!
line console 0
 logging synchronous
 exec-timeout 5 0
 login local
!
! Timezone
clock timezone UTC 0 0
!
! NTP

ntp server pool.ntp.org

!
! DNS

ip name-server 8.8.8.8

!
! Syslog

logging 10.0.0.200
logging trap informational
logging facility local6

!
! Management Interface
interface GigabitEthernet0/0
 description ** MANAGEMENT **
 ip address 10.0.0.1 255.255.255.0
 no shutdown
!

ip route 0.0.0.0 0.0.0.0 10.0.0.254

!
! Security Hardening
no ip http server
no ip http secure-server
no cdp run
no ip source-route
no ip proxy-arp
service tcp-keepalives-in
service tcp-keepalives-out
!
! Login Banner

banner login ^
AUTHORIZED ACCESS ONLY. Unauthorized access is prohibited and will be prosecuted.
^

!
end